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This thesis is a follow-on effort to work conducted by Michael Chalfant and 
Kevin Coats [Ref. 1], The focus is the design and implementation of a web-based 
information system for the Asilomar Conference on Signals, Systems and Computers. 
This technical conference specializes in signal and image processing, communications, 
sensor systems, and computer hardware and software. Organized in collaboration with 
the Naval Postgraduate School, San Jose State University, and the IEEE Signal 
Processing Society, the Conference is conducted annually at the Asilomar Conference 
Facility in Pacific Grove, California. Initial project efforts concentrated on article 
submissions and system administration (i.e., database management). The article review 
process and overall implementation of the improved system is the focus of this thesis. 

The objectives of this thesis are to: 

1) Analyze the article review process of the Asilomar Conference, 

2) Implement a World Wide Web (WWW) based article review process, 

3) Implement the improved Asilomar Conference information system. 

Internet automation is accomplished via interactive WWW pages, created using 

Borland’s Delphi as a programming tool, O'Rielly’s WebSite as the web server, and 
Common Gateway Interface scripts as the mechanism for interactivity. This interactivity 
provides seamless global access to the Conference database and processes. 
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I. INTRODUCTION 



This thesis is a follow-on effort to work conducted by Michael Chalfant and 
Kevin Coats [Ref. 1], The focus, both then and now, is the design and implementation of 
a web-based information system that will automate and provide remote access to the 
different tasks involved with the organization and administration of the Asilomar 
Conference on Signals, Systems and Computers. This technical conference specializes in 
signal and image processing, communications, sensor systems, and computer hardware 
and software. Organized in collaboration with the Naval Postgraduate School, San Jose 
State University, and the IEEE Signal Processing Society, the Conference is conducted 
annually at the Asilomar Conference Facility in Pacific Grove, California. 

A. OBJECTIVES 

The objectives of this thesis are to expand the design of the information system 
proposed during the initial thesis effort [Ref. 1], which automates the tasks involved with 
the Asilomar Conference. To that end, the objectives are to: 

1) Analyze the article review process of the Asilomar Conference, 

2) Implement a World Wide Web (WWW) based article review process, 

3) Implement the entirety of the improved Asilomar Conference information 
system. 
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B. 



OUTLINE 



Section II provides background information on the Asilomar Conference, 
including a general overview of the Conference, Conference organization, and 
Conference business processes. Section III discusses the efforts of the overall project. 
Section IV covers the implementation of the project, and focuses on platform and system 
design issues. Finally, conclusions and recommendations are covered in Section V. 
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II. BACKGROUND 



This chapter provides background information on the Asilomar Conference prior 
to the start of this project. The first section is a general overview of the Conference itself. 
The second section details the structural organization of the Conference. Finally, the last 
section discusses the Conference business processes. 

A. CONFERENCE OVERVIEW 

The Conference process begins with a "Call for Papers", approximately one year 
prior to the Conference convening date. This solicitation is designed to generate article 
submissions under certain predesignated topic areas. Prospective authors submit 
abstracts and extended summaries of their work. Next, Conference administrators review 
all submissions in search of those best suited for presentation. Once the selections have 
been made, acceptance invitations are sent out to the respective authors. Finally, a "Final 
Program and Abstract Catalog" is printed up and is distributed to potential Conference 
attendees in order to generate interest and provide a listing of the topics to be presented. 

The Conference itself convenes over a three day period in late October. Articles 
are presented during sessions divided by topic area. Eight parallel sessions occur each 
half-day, with each session consisting of 8 to 12 presentations. Each Conference attendee 
is mailed a copy of the Conference proceedings after the Conference. 
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B. STRUCTURAL ORGANIZATION OF THE CONFERENCE 



The Conference is made up of four main elements: organizers, authors, reviewers, 
and attendees. Organizers handle administrative matters, authors submit and present 
articles, reviewers select articles for presentation, and attendees attend the Conference. A 
more detailed discussion of each follows. 

1. Organizers 

Two organizational bodies, the Conference Committee and the Steering 
Committee, serve as the guiding forces behind the Conference. The Steering Committee 
is primarily concerned with long term administration and is not directly involved with the 
actual setup or execution of the Conference. For this reason, it is not discussed further 
here. The Conference Committee, on the other hand, is responsible for most of the 
functions of the Conference. It is comprised of several chairpersons, including the 
Publicity, Publication, Coordination, and Technical Program Chairs. The Technical 
Program Chair (TPC) heads the Technical Program Committee, which consists of 6 to 8 
Technical Area Chairs (TACs) and is responsible for technical content. The TPC 
determines what topics should be included in the "Call for Papers", based on previous 
Conference content and current interest, and administers the article review process. 
Session Chairs further assist the TPC and TACs by coordinating and scheduling 
individual sessions. They set the tone for their respective sessions by inviting 3-4 papers 
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covering subject matter that is of particular interest to the session. These "invited" papers 
are automatically selected for presentation and are exempt from the review process. 

2. Authors 

Authors that have research pertinent to those topics described in the "Call for 
Papers" are encouraged to submit their work for consideration. Instructions for article 
submission are included in the "Call for Papers" and on the Conference Web page. A 
title, abstract, and extended summary are all that are required to submit an article. Prior 
to the start of this project, abstracts and plain text extended summaries could be 
submitted via e-mail or standard mail. After the review and selection process is 
complete, authors are notified whether or not their articles were selected for presentation 
via standard mail. Finally, authors that are selected are required to submit a complete 
copy of their article for use in the publication of the Conference proceedings. 

3. Reviewers 

The TPC and TACs are responsible for the article review process. The review 
occurs several months prior to the Conference, the format for which is a massive one day 
'face-to-face' review session conducted at the Naval Postgraduate School in Monterey, 
CA. The Conference sponsors the 'face-to-face' review, an expensive endeavor. During 
the review session, submitted articles are divided up amongst the various TACs according 
to topic area, with abstracts serving as the primary means by which articles are judged for 
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acceptance. Extended summaries are also available for review if more details are 
required. The TPC serves as mediator during the review process in order to resolve any 
disputes that may occur. 

4. Attendees 

Information about the upcoming Conference is available to prospective attendees 
via the Conference WWW homepage or off-line via an established mailing list. 
Registration occurs manually via standard mail. Bank checks and cash are the only form 
of payment which the Conference accepts. Following registration, attendees receive an 
abstract catalog describing the articles scheduled for presentation. 

C. CONFERENCE PROCESSES 

The Conference Committee is responsible for publishing Conference information. 
They do so by posting information on the Conference WWW homepage and by sending 
out information to the mailing list. The Conference Committee collects and sorts 
registrations and submissions. Following the completion of the review process, the 
committee sends out accept/reject notices to submission authors and sends out an abstract 
catalog to prospective Conference attendees. Following the Conference, proceedings are 
published by the Institute of Electrical & Electronics Engineers (IEEE) Computer Society 
Press. All abstracts and summaries are discarded two months after the Conference. 
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III. ASILOMAR CONFERENCE PROJECT 



A. INITIAL THESIS WORK 

1. Analysis 

The first task in the design of the Asilomar information system involved the 
analysis of the various business functions of the Conference, as the original process 
needed to be thoroughly understood before improvements could be attempted. Through 
surveys of authors and interviews with Conference organizers, Coats and Chalfant were 
able to establish the primary business functions of the Conference: 1) attracting attendees 
and authors; 2) determining topic areas; 3) collecting article abstracts and summaries; 4) 
reviewing and selecting articles; and 5) disseminating article information [Ref. 1]. 

The next task was to determine how these various functions were currently being 
accomplished, and to what extent automation had already been incorporated into the 
various functions. The following is a breakdown of the Conference process prior to this 
project. Existing automated/on-line systems consisted of a Conference WWW homepage 
where attendees could obtain details about the Conference (location, cost, etc.) and an 
e-mail address to which abstract submissions could be sent. The non-automated 
processes included mailing Conference information via a previous-attendees mailing list, 
collecting article submissions through standard mail, determining topic areas, reviewing 
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articles, publishing the hard-copy Conference proceedings, and presenting author papers 
[Ref. 1]. 

2. Planning 

Analysis of the overall process suggested that automation of several of the 
Conference's key business functions would decrease expenses and increase efficiency. In 
particular, both the submission and review processes are time consuming and expensive, 
as authors have to mail articles via either hard copy or electronic format via e-mail. 
Conference administrators have to collect the information, enter it into a database, collate 
the abstracts and summaries, and arrange and print the Abstract Catalog. The review 
process is even more inefficient and expensive. The Conference incurs significant 
expense in the transport and lodging of reviewers during the one-day marathon review 
session that occurs annually at the Naval Postgraduate School in Monterey, CA. 

Although the review process seemed more in need of re-engineering, logic dictated that it 
was first necessary to redesign the submission process. For this reason, and due to time 
constraints. Coats and Chalfant decided that the scope of their endeavor would 
necessarily have to be limited to the submission portion of the system, along with 
administrative functions. 
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3. Design 



The submission process and several administrative functions were automated 
through the use of HTML 3.0 and Common Gateway Interface (CGI). The automation 
allows authors to submit information about their articles via the WWW and any common 
browser. It also allows for the update of their contact information maintained in the 
Conference database. 

Several system administration functions were also automated, such as maintaining 
passwords, accessing the database, updating the database as articles are reviewed and 
selected, and printing articles, accept/reject notices, and the abstract catalog [Ref. 1]. 
User-friendly interfaces and highly automated CGIs were used, keeping 'ease of use' in 
mind. 



4. Implementation 

The automation of the submission process and the administration process was 
completed by Coats and Chalfant in September of 1996. However, the new prototype 
was used only sparingly during the 1996 Asilomar Conference. Authors submitted their 
article abstracts and extended summaries via standard mail or electronic mail. The 
administrative staff collected the submission data and manually transferred it into the 
prototype system database using an ordinary browser and the WWW. This served as a 
way to further debug the portions of the system designed and implemented by Coats and 
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Chalfant [Ref. 1], Several administrative tasks, such as the setup of the abstract catalog 
and the advance program and generation of acceptance/rejection notices, were then 
conducted via the System Administration Functions of the new prototype system. The 
goal of both thesis efforts is to have full functionality and implementation of the new 
prototype for the 1997 Asilomar Conference. 

B. FOLLOW-ON THESIS WORK 

1. System Assessment 

As mentioned in the previous section, the system automation conducted by 
Chalfant and Coats dealt primarily with the On-line submission of articles and some 
system administration functions. This was a necessary precursor to the real benefits to be 
gained from automation. The article review process constitutes a significant expense for 
the Conference, as various costs to fund the review session in Monterey are sponsored by 
the Conference organization. Cost reduction alone would be reason enough to modify the 
review process to allow for remote access reviewing. In addition, the amount of time 
available for reviewers during the review session is insufficient for providing a thorough 
review for each article submission. Remote access reviewing would allow reviewers 
more time to conduct individual reviews. Reviews could be conducted at any time from 
any location with an ordinary browser, as long as WWW access is available. The result 
would be a more thorough, fair and impartial review process. 
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2. On-line Article Review Sub-system 

The On-line Article Review Sub-system makes use of Common Gateway 
Interface (CGI) programs and HTML forms in order to interactively access article 
submissions. Reviewers can peruse the various article submissions via keyword searches 
of the database. Once they have reviewed the abstract, they can submit their vote and any 
comments they may have about the submission via the HTML form. The review data is 
stored in the Reviews database table, where it can be accessed later by the reviewer for 
editing purposes or by the Master Reviewer for accounting purposes. 

3. Master Review Sub-system 

The Master Review Sub-system, also employing CGI programs and HTML forms, 
allows the Master reviewer to access the Reviews database table in order to assess the 
submitted reviews. The Master reviewer can view the vote tally for each article and read 
the various reviewer comments. The system also allows the Master reviewer to initiate 
accept/reject action based on votes submitted by the reviewers. Once the decision is 
made, the push of a button updates the accept/reject information in the system 
administration database. In the event of a tie, the Master reviewer has final decision 
authority. 
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4. Security 



There are a number of security concerns involved with the utilization of a Web- 
based Conference information system. Secrecy and integrity of both article submissions 
and reviewer inputs are crucial for the fair and impartial conduct of any Conference 
process. Secrecy is an issue because reviewers require the ability to vote freely, without 
fear of repercussion from other reviewers. Review submissions must therefore be kept 
confidential, their access restricted from anyone other than the originating reviewer and 
the Master Reviewer. The system accomplishes this via password protection. Only the 
Master reviewer has access to all of the reviewer inputs. 

Integrity is an issue because of the copyrights involved with article submissions. 
Article data is, theoretically, copyrighted the moment it is placed into a "tangible 
medium", such as a text, .pdf, or .ps file format [Ref. 10]. Unauthorized tampering with 
article submissions is, therefore, illegal and unethical. The system addresses data 
integrity via both password protection and user access restrictions (see section IV. A. 2). 

The security discussion thus far has been limited to secrecy and integrity as 
described above. Although it is not germane to the Asilomar Conference on Signals, 
Systems and Computers, it should be noted that secrecy, when dealing with classified 
information, requires additional security measures, such as data encryption and 
decryption. 
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5. System Upgrades 



Several system application upgrades were suggested following the initial project 
and are, subsequently, implemented during this thesis. First, the Web server software, 
O’Reilly's WEBSITE, Version 1.0 [Ref. 8], has been upgraded to WEBSITE Professional, 
Version 1.0 [Ref. 8]. The Professional version provides support for more Application 
Programming Interfaces (APIs) and provides more security features, such as Secure 
Socket Interface for secure data exchange. 

Additionally, the FTP server software, WFTPD Version 1.1, was upgraded from 
the 16 bit version to the 32 bit version, WFTPD Version 2.34 [Ref. 7]. This upgrade 
provides improved performance as well as an improved user interface. 

6. System Migration 

Once all of the application upgrades were in place, all programs for the various 
sub-systems complete, and all security measures tested and implemented, the next step 
was to migrate the Conference and its processes to the new system. Placing the system 
'on-line' was simply a matter of activating the link to the On-line Article Submission sub- 
system located on the Asilomar homepage. 
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IV. IMPLEMENTATION 



A. ISSUES 

1. Applications 
a. Delphi 

Borland's Delphi [Ref. 9] is one of the most powerful and easy to use 
Rapid Application Development (RAD) tools available on the market today. It is truly 
object oriented, using Object Pascal as its programming language. Some of its attractive 
attributes are its easy-to-use "drag-and-drop" interface and its scalable database 
connectivity. More importantly, Delphi is a programming tool that makes for the 
simplified creation of Common Gateway Interface (CGI) programs. These CGI 
programs, or scripts, are what makes dynamic Web pages possible. CGI and dynamic 
interactivity are discussed in further detail in the next section. For now, suffice it to say 
that Delphi serves as a vital link between client and server in the retrieval and 
dissemination of information. For all of these reasons, Delphi was chosen as the 
application development tool for use by this project. 
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b. Common Gateway Interface 

The tremendous growth and popularity of the WWW is largely attributable 
to CGI. This standardized protocol is the vehicle by which Web use has evolved from the 
viewing of static Web pages to user interaction with dynamic Web documents. Dynamic 
or 'live' data has opened up a world of possibilities for the WWW and its users. 

For our purposes, CGI is the mechanism or agent by which Conference 
functions can be automated. Whereas article data was once submitted via e-mail or 
standard mail and entered manually into the database, now information can be submitted 
interactively via the Web with any standard browser. More importantly, for 
administrators, the submission data is automatically entered into the database at the time 
of browser submission. A narrative describing how CGI accomplishes this task follows 
in the next paragraph. 

CGI is a process or specification that resides external to the Web server 
software. CGI scripts for this project were created using Delphi and are contained within 
the Delphi compiled executables. When a Web site receives a call from an HTML form 
(i.e., a user request) specifying a certain CGI script, the Web server forwards input data 
from the requesting browser to the CGI script via a temporary file that it creates solely for 
the execution of the CGI script. Upon receiving the input data, the CGI script executes 
the requested task. CGI scripts, which can perform any number of tasks, provide 
functionality for Web servers. Database access and administration is the primary 
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functionality that CGI brings to this project. The process is relatively simple, and is 
depicted graphically in Figure 4-1. A user accesses the Asilomar Web site using an 
ordinary browser (e.g., Netscape Navigator or Microsoft Explorer). Entering data into a 
form at this Web site triggers the WEBSITE web server to execute a CGI script. 



Common Gateway Interface 
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Input Data 



HTML Page 
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Output Data 



Figure 4- 1 



WEBSITE calls the executable file and passes the CGI input parameters from the form 
via a temporary file. The CGI executable reads the temporary file, processes the data and 
sends the output data stream back to the temporary file. When WEBSITE detects that the 
CGI script has ceased (it finds the expected output file returned by the CGI code), it 
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retrieves the data from the executable and then sends the data to the browser [Ref. 3], 

The important thing to note about the CGI process is that the executable file exists 
and operates external to the Web Server software. In fact, the CGI executable shares 
CPU resources with the Web Server. This provides flexibility in what CGI programs can 
do. The drawback, however, is the increase in resource overhead required by the CGI 
executables. 



CGI is by far the most prevalent method of interactive Web page 
implementation in use today. There are several reasons for this. First, CGI is flexible and 
adaptable to users' needs. Second, it is a standardized and established protocol. Third, 
developmental costs and risks are low compared to most other gateway interfaces. The 
primary drawback of CGI is poor performance under certain conditions, such as 
concurrent page hits. When multiple users simultaneously request the same CGI process, 
multiple resource intensive CGI programs start running concurrently, each contributing 
significantly to system overhead. The result is system slowdown in the form of poor 
performance. In fact, the ability or tendency of CGI programs to monopolize system 
resources necessitates the utilization of a true multitasking operating system, such as 
Windows95 or WindowsNT. However, in an environment where multiple concurrent hits 
are not expected (i.e., only one CGI program executes at any given time), required system 
overhead will be minimal and poor performance will be a nonissue [Ref. 6]. 
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One alternative to CGI that has gained some notoriety is Application 
Programming Interface (API). API, like CGI, is a protocol that provides increased 
functionality to a Web Server. Unlike CGI, API achieves this added functionality through 
the use of a dynamic link library (DLL), not through the use of external programs. APIs, 
existing as DLLs, reside as internal processes within the Web Server software. They 
function similarly to CGI programs, called into execution by user browsers via HTML 
forms. The main difference between CGI and API is that API DLLs mn as internal 
processes within the Web Server memory space. Improved performance of memory 
executed API versus hard disk executed CGI can be significant, but not enough to offset 
the drawbacks encountered in the use of APIs. First, API is not a standardized protocol 
like CGI. It is proprietary, normally tied to the manufacturer of a particular Web Server. 
For instance, two popular API variants are Netscape’s NS API [Ref. 1 1 ] and Microsoft's 
IS API [Ref. 12]. Second, the development of API programs is an expensive and time 
consuming process. API, unlike CGI, involves a lower level of programming, which 
requires knowledge and understanding of such system intricacies as multithreading and 
multitasking. This requires a degree of programming expertise not often found 'in-house'. 
External agents or consultants are often hired to develop these applications, making the 
System Development Life Cycle of API programs costly and time consuming [Ref. 6]. In 
addition, the lack of familiarity with the organization often makes the external agent's 
task that much more difficult. CGI programs can usually be developed 'in-house' by 
organizational personnel knowledgeable of both programming and of the organization 
itself. Third, API programs are a risk because they execute within the Web Server's 
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address space as DLLs. The failure of a corrupt API program can easily bring down the 
entire server. A corrupt CGI program, on the other hand, is not likely to crash the server. 
Finally, updating and modifying CGI forms is far easier than modifying API forms. This 
is important, considering how often pages are likely to require change and/or 
modification. 



These considerations led to the choice of CGI as the Web Server protocol 
for this project, CGI provides both functionality and flexibility at an affordable cost. 
Additionally, the scenario under which this prototype will be utilized is not one subject to 
multiple concurrent hits that might result in poor CGI performance. The system does 
involve many CGI programs, but the likelihood of more than one being called upon at any 
given time is low. Finally, long term maintenance was also a consideration. Should a 
form or page changes be required, CGI coding and debugging is far more manageable 
than complex API programs. 

c. Web Server 

The Web server software serves as the controlling agent between the Web 
site (the server) and the Internet user (the client), maintaining the connection between the 
PC hardware and the Internet. The PC used in this project has been assigned a static IP 
address and maintains a continuous Internet connection via the ECE department's local 
area network. When an Internet user accesses the PC's address, WEBSITE automatically 
displays Index.htm in the C:\Website\Htdocs\Submit directory. WEBSITE then displays 
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other HTML pages or executes Delphi programs as implemented within the system. 

All HTML pages are stored according to their sub-system category. On- 
line Article Submission pages are stored in the C:\Website\Htdocs\Submit directory. On- 
line Article Review and Master Review pages are stored in the 

C:\Website\Htdocs\Review directory. Finally, System Administration pages are stored in 
the C:\Website\Htdocs\Admin directory. All of the Delphi executables for all of the sub- 
systems are stored in the C:\Website\cgi-win directory as required by WEBSITE. The 
database queries conducted throughout the system are generated via the Delphi 
executables, with WEBSITE serving as the intermediary between the browser (user) and 
the system. WEBSITE passes the query via standard query language (SQL) to the system 
database, Borland's PARADOX. 

One of the primary responsibilities of the WEBSITE Professional web 
server software is security. WEBSITE accomplishes this through the judicious control of 
user access and rights to the web server and its directories. WEBSITE limits a user's 
access to the C:\Website\Htdocs directory and above, and strictly prohibits access to the 
root directory. WEBSITE also possesses FTP download capability. This functionality 
allows users to download any file with an '.exe' or '.html' extension that resides in the 
C:\Website\Htdocs directory or higher. FTP uploads, on the other hand, are handled 
strictly by the FTPD FTP server, which is discussed in the following section. 
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d. 



FTPD FTP Server 



The system requires that authors be allowed to upload their Extended 
Summaries to the Conference database. Because summaries may contain graphics and 
equations not suitable for ASCII text, they cannot be submitted in the same manner that 
the article abstracts are, via HTML forms. They must be submitted as separate files in a 
separate manner. FTP is an Internet utility that provides the file transfer functionality 
necessary for the varied file formats encountered in Extended Summaries. WFTPD, 
Version 2.34 (32 bit version for Windows 95) [Ref. 7], was chosen as the FTP server for 
the project based on its balance between affordability and functionality. 

Allowing uploads presents a security risk to the server due to the 
potentially dangerous types of files that could be introduced to the system. System 
administrators are warned not to execute any unknown programs (.exe files) found in the 
upload directory. Such programs should be deleted immediately upon discovery. The 
only legitimate file formats for uploading Extended Summaries are postscript (.ps), .pdf, 
or plain text (ASCII). FTP security is discussed in further detail in section IV.2.c.(2). 

e. Database 

The relational database used in the Asilomar Conference process is 
Borland's PARADOX [Ref. 9]. Database implementation for the system during the initial 
thesis mirrored the one already in use by Conference administrators. Seven tables were 
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constructed to maintain data on the Contact Authors, Submissions, Sessions, Keywords, 
and system passwords. Three additional tables were constructed during this portion of the 
project. The first two are UserlD and Password tables for the reviewers and the Master 
Reviewer. The other is a Reviews table for maintaining article review information. 

1) Review.DB contains reviewer ID's and Passwords. 

2) Master.DB contains the Master Reviewer ID and Password. 

3) Reviews.DB contains the article review information submitted by the 
various reviewers. 

These tables are depicted in Appendix B. 

2. Security 

Security is an important concern for the Conference organization. Authors from 
all over the world may submit article abstracts and extended summaries as well as 
mailing information via this system. Conference reviewers will utilize the system to 
conduct 'on-line' reviews in order to determine which articles should be presented during 
the actual Conference. Finally, Conference administrators will use both the author and 
article information to print the abstract catalogs and the Conference proceedings. For all 
of these reasons, the integrity and security of Conference submission data become 
paramount. 
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a. System Protection 

The physical security for this prototype is provided primarily by the 
physical location of the server itself, which is isolated from routine traffic. In addition, 
the server is password protected on boot-up and uses a password protected screen saver. 
This setup obviously does not provide complete access restriction, but the nature of the 
Naval Postgraduate School environment and the integrity of the student body and faculty 
does not warrant stricter measures. The real threat to the server is from the Internet, not 
from physical tampering. 

b. Database Protection 

The Conference database is protected by conducting regular backups and 
by restricting access to the database. Full magnetic tape backups of the entire database, 
conducted in a timely fashion on a regular basis, provides insurance against catastrophic 
loss of data. Physical access to the database, which resides on the server, is limited as 
described above, using a remote location and a password protected screen saver. On-line 
access to the system via the Internet poses a greater security threat, but is addressed in the 
design of the system. Database access and functionality throughout the system is 
governed by password protection. 

One problem with Web site management and Internet applications is that 
all executable and HTML files located on the Web server (C:\Website\Htdocs and below) 
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are available to anyone accessing the site for download or execution. This means that any 
of the system's CGI scripts can be executed via an ordinary browser if the URL path of 
that particular program is known. 

Fortunately, the stateless nature of CGI and HTML lessens the severity of 
this particular security risk. Because all of the CGI scripts are dynamic, the necessary 
input parameters must first be passed as hidden input from the forms directly preceding 
the database executables. Any would-be hacker entering the path of the CGI script, 
minus the input parameters, would receive only an empty form. 

Additionally, this security risk is addressed in a more proactive manner by 
programming a conditional check of a flag variable into every executable. This flag can 
only be set by entering the appropriate login and password combination on the login 
screen. Once the password has been entered correctly, a flag is set that will allow a user 
to access all database functions. If the flag is incorrect (i.e., incorrect password), the 
program will not execute and a warning message will be displayed along with a hyperlink 
back to the login screen. So, even if an unauthorized user discovers the name of an 
executable, the flag variable still requires the proper login and password [Ref. 1]. 

Unfortunately, as secure as this setup may appear, the threat of a brute 
force attack on the login and password combinations of the system still exists. This type 
of attack is one where hackers employ special software designed to guess the UserlDs and 
passwords of legitimate users. The best safeguard against this type of threat is 
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administrative in nature. The organization must train system users on proper password 
selection and utilization techniques [Ref. 1]. It should also be noted that no matter how 
secure the end system may be, electronic submissions are still vulnerable to 
eavesdropping while enroute, unless some sort of encryption scheme is used. 

c. Application Protection 

(1) WEBSITE Security. The denial of access to the PC's hard drive is the 
responsibility of the server software, WEBSITE. This program controls all Internet 
access functions of the system. Inherent in its design is a restriction that limits users to 
directories higher than the C:\WebSite directory. In other words, when a browser 
accesses the system, the lowest directory available to it is either C:\Website\Htdocs or 
C:\Website\cgi-win. It is not possible to access the root directory or any other directory 
than those stated above. WEBSITE also does not allow file uploads (i.e., a user sending a 
file to our computer) or modification of files on our system. Therefore, a user may look 
at and execute any file that we place higher in the directory structure than C:\WebSite, but 
nothing else. 



WEBSITE provides several options for managing access control to the 
Web server. The WEBSITE server administration control panel allows the system 
administrator to restrict access to various directories based on user, group, and/or IP 
address. For example, the directory C:\Website\Htdocs\Personnel could be established 
for the Personnel Department. The system administrator wants to limit access to this 
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directory (and the Web pages contained therein) to only those employees of the Personnel 
Department. This could be accomplished by establishing a group entitled, "Personnel", 
and restricting access to that directory to only members of that group. The problem here 
is that every member of the Personnel Department must be assigned a UserlD and then 
added to the Personnel group, contributing significantly to the workload of an 
administrator when the number of departmental employees is large. 

Another option is to restrict access to the directory based on IP address. 
Only users connecting from authorized IP addresses are granted access to the directory. 
This works well if the number of IP addresses is small and access to them can be 
controlled. When the number of users or employees is large, this approach eliminates the 
administrative overhead associated with assigning numerous UserlD's. 

Finally, a combination of user, group, and IP address restrictions can be 
implemented by the system administrator. This is the approach that we have taken with 
the System Administration, On-line Article Review, and Master Review Sub-systems. 
Whereas the Article Submission Sub-system has no access restriction associated with its 
use, these other sub-systems require a greater degree of secrecy and integrity. For this 
reason, the 'admin' and 'review' groups were created for restricting access to their 
respective sub-systems. A 'Master Reviewer' user was created for access to that sub- 
system. In addition, the IP addresses associated with key Conference personnel have 
been added to the access control list. WEBSITE utilizes 'and/or' logic when determining 
user access. When WEBSITE receives a call or hit from the WWW, it performs an 
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access check based on the particular URL address that is being called upon. WEBSITE 
first checks to see if the calling IP address is on the access list. If it is not, then 
WEBSITE prompts the user for a UserlD and password. If the user is on the access list 
and the password is correct, access is granted. 

(2) PTPD Security. If not configured correctly, an FTP server can be a 
security risk. Security must be inforced through the judicious use of user access rights 
built into the FTP server software package. User's with unlimited access rights can not 
only view what directories and files are on the server, but they can write to the directories 
and modify files as well. Malicious user's could easily damage important server data or 
even wipe out the contents of the entire server. For this reason, both reviewers and 
authors have been granted limited FTP access rights. The current configuration restricts 
authors to the upload directory only and limits them to 'write-only' access. This means 
that authors can write their extended summaries to the upload directory, but they cannot 
view the contents of the directory, modify its contents, or change directories. By limiting 
the user's ability to change directories, modify directory contents, and view directory 
contents, the ability to corrupt another author's data is slight. Reviewers are granted 'read 
only' access to the upload directory. This allows them to read the various extended 
summaries, but does not allow them to modify the contents of files in any way. 
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B. SYSTEM DESIGN 



1. System Overview 

The Asilomar Conference information system is composed of five major sub- 
systems; 

1) The Asilomar Conference Information Homepage, 

2) The Article Submission sub-system, 

3) The System Administration sub-system, 

4) The Article Review sub-system, 

5) The Master Review sub-system. 

The first sub-system, the Information Homepage, was in existence prior to this 
project. The Article Submission and System Administration sub-systems were developed 
and implemented, for the most part, by Coats and Chalfant [Ref. 1]. The Article Review 
and Master Review sub-systems, as well as a few System Administration programs, are 
developed and implemented in this follow-on thesis. Images of each HTML page are at 
the end of this chapter and are referred to in the program descriptions below. All of the 
code for the programs and forms (HTML, Delphi, and CGI) are included in the 
appendices for each of the various sub-systems. 
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2 . 



On-Line Article Review Sub-system description 



The On-Line Article Review sub-system is a combination of HTML pages and 
Delphi executable programs that form the user interface for the Conference article review 
process. This sub-system allows remote access to article submissions so that program 
chairs can review article submissions from anywhere in the world via the WWW using an 
ordinary browser. The sub-system is password protected in order to insure only 
authorized Conference reviewers access the article submission database. 

a. Log-on page 

The On-line Article Review Log-on page (Review30.htm) serves as an 
authentication and access control mechanism for the system. In order to access this page 
(Figure 4-2), a reviewer must have already passed the first level of access control 
presented by WEBSITE. This form solicits both the ReviewerlD and Password from the 
reviewer. When this data is entered, the browser signals the web server to execute the 
underlying CGI script, which verifies the ReviewerlD and Password with the reviewer 
password database located in the Review.DB table in PARADOX on the server. If the ID 
and password match, then the reviewer is presented with the main menu page of the On- 
line Article Review System. 
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b. Main Menu page 

The On-line Article Review Main Menu page (Revpwd.exe) welcomes 
the reviewer to the On-line Article Review System and presents the available review 
functions: 1) Review an Article, or 2) Edit a Review, as shown in Figure 4-3. 

c. Review an Article 

The Review an Article (Artrev.exe) function generates a page that presents 
three different methods by which a reviewer can search the article submission database 
for articles to review, as shown in Figure 4-4. The first is an 'All Article' search that lists 
all of the article submissions currently in the Conference database. The second search 
method is a keyword search that allows reviewers to select from a list of keywords in a 
drop-down option box. The third search method is a Paper Number search that allows 
reviewers to query the database for a specific Paper Number. The first two search 
methods initiate the ArtSrch2.exe CGI program, which executes the appropriate query of 
the Conference database. The search results are presented in table format on the 
ArtSrch2.exe page, listing Paper Number, Title and Contact Author for each submission, 
as shown in Figure 4-5. If the article of interest is found amongst the titles listed, it may 
be viewed by selecting the appropriate radio button and pressing the ‘submit’ button at 
the bottom of the table. This will prompt the system to execute the Article Review page 
(ArtView2.exe) CGI script, which displays all of the article data and provides reviewer 
input tools, as shown in Figure 4-6. The Paper Number search differs from the first two 
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search methods in that it bypasses the ArtSrch2.exe CGI program and takes the reviewer 
directly to the ArtView2,exe page, since the specific Paper Number is already known and 
provided by the reviewer. 

The ArtView2.exe page is the heart of the On-line Article Review sub- 
system. It allows reviewers to remotely access articles in the database and read them at 
their convenience. Here is where all vital article information (paper number, title, 
authors, and abstract) is displayed for the reviewer's perusal. Additionally, a hyperlink to 
the upload directory is provided that allows the reviewer access to the article’s extended 
summary. 



Review input utilities are located on the form just below the article data. 
Radio Buttons provide a mechanism for reviewers to vote on whether or not the article 
should be accepted for presentation at the Conference. Five vote categories are available: 
1) Strong Accept, 2) Conditional Accept, 3) Reject, 4) Undecided, and 5) Not Qualified. 
With the exception of 'Conditional Accept', most of these are self-explanatory. 
'Conditional Accept' is used to indicate that the reviewer favors the submission on the 
condition that sufficient room is available for its inclusion without conflicting with more 
worthy candidates. Stronger papers take precedence. A text area, provided below the 
'Vote' section, allows for reviewer comments. Here, reviewers can add amplifying 
remarks about the article and their vote. For example, reviewers voting ‘Conditional 
Accept’ could provide amplifying remarks with regard to the strength of their 
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commitment to the condtionality of the accept. 



Once the review is complete, pressing the 'Submit' button prompts the 
system to add the review information to the Reviews.DB table. This is accomplished via 
the Addl33.exe CGI program. A 'Thank You' page is generated, providing confirmation 
to the reviewers that their input has been submitted, as shown in Figure 4-7. The 
reviewer then has the option of either conducting another article review or returning to 
the Review System Main Menu. 

d. Edit a Review 

The Edit a Review (EditRev.exe) function generates a page with a table 
containing all of the reviews in the Reviews.DB table by that particular reviewer (Figure 
4-8). The CGI program accomplishes this by conducting a query of the Reviews.DB 
table using the ReviewerlD, which is passed from the initial log-on page as hidden input. 
The format for this table of reviews is the same as that described in the Review an Article 
section, listing Paper Number, Title, and Author. The reviewer selects the review of 
interest in the same manner as before, clicking on the appropriate radio button and 
pressing submit. 

The system executes the Review a Review (Revview.exe) CGI script, 
which produces a page containing both article data and previous reviewer input data. 
Once again, the reviewer can read the article abstract and Extended Summary and, if 
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necessary, modify his or her vote and/or comments from the previous review, as shown in 
Figure 4-9. 



Once the edited review is complete, pressing the ’Submit' button prompts 
the system to update the review information in the Reviews.DB table. This is 
accomplished via the Addl33b.exe CGI program. A 'Thank You' page is generated, 
providing confirmation to the reviewer that his or her input has been submitted, as shown 
in Figure 4- 10. The reviewer then has the option of either editing another review or 
returning to the On-line Article Review Sub-system Main Menu. 

3. Master Review Sub-system description 
a. Log-on page 

The Master Review Sub-system Log-on page (Masterev.htm) serves as an 
authentication and access control mechanism for the system. In order to access this page 
(Figure 4-1 1), the Master Reviewer (usually the Technical Program chair, who has final 
authority regarding acceptance and rejection of submissions) must pass the first level of 
access control presented by WEBSITE (UserlD and Password). The form itself initiates a 
second level of access control by soliciting both the MasterlD and Password from the 
Master Reviewer. Once this data is entered, the browser signals the Web server to 
execute the underlying CGI script, which verifies the MasterlD and Password with the 
password database (Master.DB) located in PARADOX. If the ID and password match. 



34 



the Master Reviewer is presented with the Main Menu page of the Master Review 
System. 



b. Main Menu page 

The Master Review Sub-system Main Menu page (Revpwd.exe) 
welcomes the Master Reviewer to the Master Review Sub-system and presents the 
available Master Review functions: 1) Summary of Reviews, 2) Accept/Reject Articles, or 
3) Overall Submission Status, as shown in Figure 4-12. 

c. Summary of Reviews 

The Summary of Reviews (Revsum.exe) function generates a page that 
presents three different methods by which the Master Reviewer can search the article 
review database (Figure 4-13). The first method displays a table that lists all reviews in 
the database. The second method is a keyword search. The Master Reviewer selects 
from a list of article keywords in a drop-down option box. Once the selection is made, 
whether it is an 'All' search or a 'keyword' search, the Revsrch.exe CGI program executes 
the appropriate query of the database and returns the resultant reviews in table format, as 
shown in Figure 4-14. Finally, the Master Reviewer may also search the Reviews.DB 
table by ReviewerlD. A table is returned listing all reviews by that particular reviewer. 
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As described in the On-line Article Review section, once the Master 



Reviewer finds the title for which he or she wants to the summary of reviews for, he or 
she simply selects the article of interest and clicks on the 'Submit' button. The associated 
CGI program (Revsrch2.exe) returns all of the article information, plus a table that 
summarizes the reviews that have been submitted by the various reviewers (Figure 4-15). 
The votes and comments of each reviewer is listed in the first table. A table that tallies 
the vote total is displayed next. 

Based on this information, the Master Reviewer can decide whether or not 
to Accept or Reject the article for presentation at the Conference. Accept/Reject buttons 
are provided at the bottom of the form to allow the Master Reviewer to accomplish this 
very task. Pressing either of these buttons executes the MastAcep.exe CGI program, 
which updates the Accept/Reject field of the Submissi.DB table for the article in 
question. A confirmation page is returned, providing verification that the database has 
been modified accordingly, as shown in Figure 4-16. The Master Reviewer then has the 
option of either viewing another summary or returning to the Master Review System 
Main Menu. 



d. Accept / Reject Articles 

This function is identical to the Accept/Reject Articles function found in 
the System Administration sub-system. It allows the Master Reviewer to go in and 
directly Accept or Reject any article in the submission database. Changes may be made 
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to one article, to several articles, or to all of the articles. 



1) Select Articles (Acceprej.exe) 

2) Accept / Reject Articles (AcepreJ2.exe) 

(1) Select Articles (Acceprej.exe). This program displays a form with a 
list of all the article titles in the Submissi.DB table, each with a checkbox (Figure 4-17). 

A drop-down option box allows the administrator to either "accept," "accept then reject," 
"reject," or "reject then accept" the selected titles. These multiple choices simplify the 
Accept/Reject process in that the Master Reviewer or system administrator does not have 
to individually mark every single article. When a list exists with more rejections than 
acceptances, checking off accepted articles and the "accept then reject" option will set the 
selected titles as accepted and automatically set the rest as rejected. If there are fewer 
rejected articles than accepted, then the rejected article titles are selected and "reject then 
accept" will reject those and accept the rest [Ref. 1]. 

To mark articles individually, either the "accept" or "reject" option is 
selected on the drop-down box and the title(s) checked off are modified as appropriate. 
"Accept" or "reject" will only modify the selected articles and will not affect other 
articles. Submitting this form calls AcepreJ2.exe, as shown in Figure 4-18. 

(2) Accept/Reject Articles (AcepreJ2.exe). The call to this program 
carries a query string containing those articles marked in the previous form. 
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Aceprej2.exe receives and parses the query string to obtain the action and the titles. A 
case statement uses the action passed to modify the necessary article fields in the 
Submissi.DB table. Titles are placed on a string list and individually processed. When 
the action is set to "accept then reject" or "reject then accept," all articles are first set 
globally to the second action (either "reject" or "accept", respectively) and then the string 
list is processed to change the selected articles to the first action (either "accept" or 
"reject", respectively) [Ref. 1]. 

e. Overall Submission Status 

The Overall Submission Status program (Overstat.exe), when called, 
executes a query of the Submissi.DB and Reviews.DB tables and returns a table listing 
the following information; 1) total number of article submissions, 2) total number of 
articles reviewed, 3) total number of articles accepted, and 4) total number of articles 
invited, illustrated in Figure 4-19. This provides the Master Reviewer with a 'big picture' 
of where the overall Conference process stands. 

4. Miscellaneous System Admin Programs 

a. Overall Submission Status 

This function (Overstat2.exe) is identical to that previously described in 
the Master Review sub-system (Overstat.exe). It is duplicated in the System 
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Administration sub-system simply for administrative convenience, as shown in Figure 4- 

20 . 



b. Database Purge 

This function was added to the system to allow administrators to purge the 
submission and review databases each year following the Conference. This frees up 
storage space and avoids confusion when the following year's submissions start to roll in. 
Once selected, the purge program (Timeout.exe) displays a confirmation page that 
requests verification from the administrator that he or she 'really' wants to purge the 
database of old entries, as shown in Figure 4-21. If the user selects 'continue', the 
Timeout2.exe program executes a CGI script that purges both databases based on a 
search of the date of each entry. All records with date/time stamp older than 15 days are 
purged from both the Submissi.DB and the Reviews.DB tables. A 'Year' field (that 
incorporates the server date/time stamp at the time of record entry) was added onto the 
Submissi.DB table and incorporated into the design of the Reviews.DB table in order to 
add this capability. Whenever an article submission or review are added to one of their 
respective database tables, the current Date/Time stamp is acquired from the Server PC's 
bios and is added to the database record entry under the Year field. A confirmation page 
is posted following the purge, informing the administrator of exactly how many records 
were purged from each of the databases (Figure 4-22). The administrator is then 
presented with a hyperlink back to the System Admin Main Menu page. 
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5. System Web Pages 



This section contains screen captures of the Web pages generated by the various 
Asilomar Conference sub-systems developed during this thesis. The pages are viewed 
with Netscape Navigator Gold 2.01 [Ref. 13] and are captured with HyperSnap-DX, 
Version 3.02 [Ref. 14]. 
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On-line Article Review System 

This page is intended for the exclusive use of Reviewers for the Asilomar Conference on Signals, Systems, & Computers 



Reviefwer ID: 



Password: | 



Submit Password I Gear Values 




Go to the On-line Submission Page 



Figure 4-2. Review30.htm. 
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On-line Article Review System 



Review Functions 

Review on Abstract 



Edit Q Review 




Figure 4-3. Revpwd.exe. 



On-Line Article Review System 

In order to review an article, you may select from one of the search options below; 

Choose from a list of Articles with the following keyword: 

Keyword: |do not semch on this field ^ 

Show me a list of Aitides like this | Reset Field | 

Choose from a list of Articles by this Author? 

Author First Name: T“~ 

Author Last Name: | " 

Find an Article by this Author | deoir Names | 

Enter the Paper Number of the article of interest: 

Paper Niunber: | 

Show me this this artide> j Reset Field | 

Choose from a list of ALL Article Submissions? 

Show me a list of AUL of the Paper Titles. I 



Return to the On-Line Article Review Options Page 

Figure 4-4. Artrev.exe. 
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On-Line Article Review System 



There are 9 Titles that match your request Select the article that you would like to review and press submit. 



Paper # 


Tide 


Author 


674 


A Sonar-based Conducting System for a Virtual MIDI Orchestra 


Joohwan Chun 


604 


Advanced Filter Design 


Bnan Evans 


r 510 


Arithmetic Arrays using Cellular Neural Networks 


Saeid Sadeghi-Emamchaie [ 


r 744 


Example Article Submission 


Todd Kinney 


r 616 


Lazy Rounding 


Paul Fiore 


r 508 


On the Use of Recoding for Low-Power Constant Fixed Point Multiplication 


Meng-Jang Lin 


r 663 


Robust High Speed Digital Normal Form Oscillators 


Peter Bauer 


r 487 


VHDL SIMULATION, SYNTHESIS AND FPGA IMPLEMENTATION OF FIR i 
FILTERS 


K Venkatraman 


r 452 


VHDL-Based Performance Modeling and Its Application to Real Time Infrared Search 1 
land Track System Design 


Enc Pauer 



Selectthis^perfor " | 



• I 

Query another Article | 



Return to the On-Line ArtiSe Re\new Options Page 



Figure 4-5. Artsrch2.exe. 
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Article Review 



Author (s): 

Todd Kinney, Naval Postgraduate School 

Title: ” Example Article Submission ” 

Paper Number: " 744 “ 

Abstract: 

Example article abstract. 

The Extended Summary for this submission may be viewed by selecting file 744 fi'om the following list 
If your browser is not equipped with a postscript viewer, you may consider downloading GhosUaew here. 

Please cast your vote Jor this particular article, todd: 

^ Strong Accept G Conditional Accept G Reject G Undecided G Not Qualified 
Review comments: 

Enter review comments here. Please limit the length of your review to 100 words. 



, . d 

Submit Review Info | 



^ Review Mother Article 



Return to the On-Line Article Review Options page 



Figure 4-6. Artview2.exe. 
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Article Review 



Thank you for your input, todd. Your information has been added to the article review database 



Query ainotber Artide 



Return to the OndJne ^cie Review Options Page 




Figure 4-7. Addl33.exe. 
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Edit a Review 



You have 1 review(s) in the database. 



Paper # j 



Title 



Author 



C 744 [Example Article Submission Todd Kinney 



Select this Poiper for Review 



Return to the On-Line Articje Review Options Page 



Figure 4-8. Editrev.exe. 
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Edit a Review 

Author(s): 

Todd Kinney, Naval Postgraduate School 

Title: ” Example Article Submission ’’ 

Paper Number: " 744 " 

Abstract: 

Example article abstract 

You may view the extended summary for this submission by selecting file 744 fi^om the following list 

Please edit your review for this paiticular article: 

Origiiial Vote: “ Undecided " 

New Vote: 

^ Strong Accept ^ Conditional Accept C Reject C Undecided C Not Qualified 
Original Review: (Simply edit or leave as is.) 

ExainpTe comrtients for the article review. 3 

zl 

Submit Review Info 



Edit Another Review 



Return to the On-Line Article Review Options poge 

Figure 4-9. Revview.exe. 
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Edit a Review 



Thank you for your input, todd Your information has been added to the article review database 



Query another Article 



Return to the ?)n-Une Article Review Options Page 






Figure 4-10. Addl33b.exe. 
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Master Review System 

This page is intended for the exclusive use by the Master Reviewer for the Asilomar Conference on Signals, Systems, & 
Computers 



Master ID: 1 Password: [ 



Submit Password | C{e&7VaTues^ | 



Go to the On-line Submission Page 
Go to the On-line Article Review Page 




Figure 4-11. Masterev.htm. 




Master Review System 



Master Review Functions 

Summary of Reviews I 



Accept/Rejed Artides 



Overall Submissior^ Status 




Go to the On-Line Article Review P^ge 



Figure 4-12. Mastpwd.exe. 




Summary of Reviews 

A summary of article reviews may be viewed by selecting one of the search options below 

Choose from a list of ALL Reviewed Articles? 

Show me a list of ALL Reviews | 

Choose from a list of Reviewed Articles with these characteristics? 

Keyword: |do not search on this field ^ 

Show me ai list of Reviews like this j Reset Artrde Fields | 

Choose from a list of Reviewers? 

ReviewerlD: |do not search on this^f 

Show me a list of Reviews by this Reviewer I Reset Article Reid 

Return to Master Review System Options Page | 

Figure 4-13. Revsum.exe. 
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Master Review System 



Here are the Reviews that match your request. 



Paper Number 


1 Tide j Author . 


r #744 


Example Article Submission Todd Kinney 



Selea a Paper for Review 



View another summary 



Return to the Master Review Options Page 



Figure 4-14. Revsrch.exe. 
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Master Review System 

Author (s): 

Todd Kinney, Naval Postgraduate School 

Title: ” Example Article Submission ” 

Paper Number: ” 744 " 

Abstract: 

Example article abstract. 

You may view the extended summary for this submission by selecting file 744 fi’om the following list 



There are 1 review(s) for this paper in the database. 



JReviewerlD 


Vote 


r" • : 1 

Review 


^todd 


Not Qualified; 


\ 

Example comments f:>r the article review. | 



Vote Summary 



[# Votes 1 Strong Accept jCondidonal Accept iReject: Undecided jNot Qualified 


fi "~^|o :;o ;}o 1 


0 ; 


1 



Please cast your vote for this particular article: 
^ Accept Reject 



Submit F^iew Into 



View another summary 



Return to the Master Review Options Page 



Figure 4-15. Revsrch2.exe. 



54 



Accept/Reject an Article 



Thank you for your input, Master Reviewer Your information has been added to the Article Submission database 



View another Summary 



Return to the Master R^ew Options Page 




Figure 4-16. MastAcep.exe. 
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Master Review System 



There are four methods of accepting or rejecting Articles; 

• Accept the selected articles only, do not mo(% any other Articles 

• Accept the selected articles AM) Reject al others 

• Reject the selected articles only, do not modi^ any other Articles 

• Reject the selected articles AM) Accept al others 



[^CEFT 



r #416 An Elliptical Head Tracker 

r # 418 Texture Classification Using wavelet Frame Decompositions 

r # 4 1 9 Davidson Method for Total Least Squares Filter in Robot Navigation 

V- # 420 Parallel Tensor-GMRES Method for Large and Square Nonlinear Systems 

r # 42 1 FFT-Based CEpper Receiver for F ast Frequency-Hopping Spread-Spectrum System 

r # 422 Joint beamforming and Viterbi equalizer in wireless communications 

r # 423 Rejection of Multitone Jamming of an FFH/BFSK Communication System 

r # 426 Computation of view angle in face images 

r # 428 WIDEBAND SPEECH COMPRESSION BASED ON WAVELET TMNSFORM 



r... j /i ^n 






ulxz. -ftf .Tt ifiilfi TTi 









Figure 4-17. Acceprej.exe. 
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Master Review System 



The following article(s) were REJECTED: 

# 744 Example Article Submission 

Accept/Rejed more Articles j 

Now Assign the Artides to Sessions I 



Return to the Master Review System Options page 



Figure 4-18. Aceprej2.exe. 
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Overall Submission Status 



Here are the current Bgures on the overall submission and review process: 



1# Submissions 


# Reviewed 


# Accepted 


# Invited! 


;308 


|i 


0_ __ ; 


0 _ _ j 



Return to the Master Review Options Page 



Figure 4-19. Overstat.exe. 
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Overall Submission Status 



Here are the current figures on the overall submission and review process: 



i# Submissions 


# Reviewed 


# Accepted 


# Invited 


[308 :[l 


0_ 


0 



Return to the System Admin Options Page 



Figure 4-20. Ovrstat2.exe. 
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Database Purge 



Are you absolutely certam that you want to purge old records from the database? 

Both old submissions and reviews v;ti11 be purged. Press the button below to execute the purge 



Purge Old Recxjrds Now! 



- ■ - - ' I 

Return to the System Admin Main Menu 




Figure 4-2 1 . Timeout.exe. 
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Database Purge 



The records have been successfully purged from the database, 
Reviews. DB records deleted; 1. 

Submissi.DB records deleted; 308 



Return to the System Admin Opiions Page 




Figure 4-22. Timeout2.exe. 
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V. CONCLUSION & RECOMMENDATIONS 



A. LOOKING BACK 

The Asilomar Conference on Signals, Systems and Computers presents the latest 
advances in technology. It is only appropriate that the information system of the 
Conference does the same. The goals of this project were to automate and streamline 
Conference processes with a Web-based approach to the Conference information system. 
After careful analysis of the existing system and processes. Coats and Chalfant [Ref. 1 ] 
designed and implemented the article submission and system administration portions of 
the new information system. This thesis saw the design and implementation of the article 
review portion, as well as the correction and/or modification of the system as a whole as 
needed. The entirety of the new system was placed “on-line” for use by the 1997 
Asilomar Conference in May. Over one hundred authors from around the world utilized 
the Web-base system to submit their works. Reviewers from across the country have 
reviewed these same submissions from their own desktops. The initial feedback from 
those involved has been positive. The system works, is easy to use, and saves time. This 
project has enabled the Asilomar Conference on Signals, Systems and Computers to 
move with the advances in information technology into the future. This necessary first 
step not only improves the way the Conference does business today, it empowers 
administrators to rethink the way the Conference might be conducted in the future. 

Global access to Conference information allows Conference functions to be carried out 
from anywhere in the world with an Internet connection. The time and expense 
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traditionally involved with congregating Conference participants in one geographic 
location will be a thing of the past. 

B. LOOKING AHEAD 

1. Recommendations 

a. Scheduling 

The scheduling of selected articles into presentation sessions is a tedious 
and time consuming task. It is currently conducted by the reviewers themselves. This 
distracts from their primary task of reviewing articles. By incorporating the automatic 
scheduling of selected articles into sessions this administrative burden could be removed. 

b. Registration 

The registration of Conference attendees is another function that is 
currently conducted via regular mail. This results in a significant expense for both 
participants and administrators of the Conference. On-line registration would not only 
eliminate mailing expenses, it would also reduce the time and administrative overhead 
involved with the registration process. This functionality could be developed in-house 
and added to the current system, depending on the availability of personnel with the 
necessary technical expertise. A secure on-line payment capability would be required. 
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WEBSITE Professional 1.0 [Ref. 8] has SSL capability. It would simply be a matter of 
obtaining a security certificate in order to implement on-line payment via credit cards. 
Based on the Conference budget, this function could also be outsourced to a commercial 
company that specializes in on-line registration. 

2. Potential DoD Application 

The DoD is a large organization with a vast assortment of information needs. 
Everything from personnel records and financial data to spare parts inventories is 
maintained in large databases. The diversity in both the geographic location and the 
stovepipe systems of the various departments and agencies maintaining these databases 
makes accessing information difficult and/or expensive. These difficulties are precisely 
why this project was started. The World Wide Web as a communications medium 
provides viable solutions to difficult information problems. Web based information 
systems provide organizations with global and seamless access to large databases that is 
entirely platform independent. Geographic barriers disappear over the Internet, as clients 
from all over the world can access the system, regardless of what operating system or 
browser they are using. The barriers of technological diversity also disappear. 
Standardized Web protocols allow for the universal sharing of data that was once thought 
to be unattainable. Stovepipe systems once held information locked up in the 
technological equivalent of a foreign prison. Now that information can be accessed 
globally and shared universally, thanks to web based information technology. Every 
mission area, from support to primary combat, that maintains and utilizes data stored in a 
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database can take advantage of the Internet. Time can be saved, expenses can be reduced, 
and never before thought of functionality can be added to the daily operation of the 
organization. 



C. CLOSING REMARKS 



The ultimate goal of this project was to provide conference participants with 
global access to the various Conference processes. The work done in both this thesis and 
the initial thesis has accomplished that task. Everything from article submissions and 
database management to submission reviews can be achieved globally via the Internet. 
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APPENDIX A. DELPHI TUTORIAL 



A. OVERVIEW 

Borland’s Delphi is the scripting language that was used to create this project’s 
CGI programs. This section provides a brief overview of how these programs were 
developed. The following section provides an example of a simple CGI program and its 
code. 



Although Delphi is primarily known as a “drag-and-drop” Windows programming 
tool, it is easily adapted to the construction of interactive WWW scripts. Components are 
the building blocks that make this possible in Delphi. A component is an object or 
module that provides some specific bit of functionality to an object oriented program. A 
CGI component provides the CGI functionality that turns forms into interactive 
executables. At the start of this project, the field of dynamic Web page development was 
in its infancy. The number of commercially available CGI components for Delphi was 
limited. As a result, much of the CGI functionality had to be manually coded into the 
Delphi programs. This resulted in a time consuming effort that could stand some 
automation in order to take full advantage of Delphi’s object oriented drag-and-drop 
characteristics. Fortunately, one knows that wherever there is a market, products will 
appear. As a result, commercial vendors have since produced a number of CGI 
components that eliminate the need for manual coding in Delphi. They provide CGI 
functionality by simply “dragging and dropping” a component object onto a form, vice 
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manually typing code into the text editor. 



As mentioned above, Delphi components or modules contain Object Pascal 
coding for the particular functionality that they provide. In the case of CGI components, 
the objects contain CGI scripts that allow the Web server to communicate with a browser 
via an HTML document or form. Both the HTML code for the requesting form and the 
CGI script for the task the form is requesting are located and compiled within the Delphi 
program. Web servers maintain all CGI executables or, in this case, Delphi programs in 
specially designated directories. For example, a server might have the following sub- 
directories for its CGI programs: 1) cgi-bin, for Windows Perl CGI scripts, 2) cgi-win, 
for other Windows CGI scripts, and 3) cgi-dos, for DOS Perl CGI scripts. 

Once the project Web pages and database queries are planned, Delphi programs 
are designed and compiled as necessary. The executables may be set-up to be 
automatically stored in WEBSITE’s cgi-win directory upon compiling. Any program 
stored in this directory is ready for immediate use by the server when specifically called 
upon by a user. 

B. SAMPLE APPLICATION 

The following CGI example is a simple form that solicits user input information 
that will be gathered by the CGI script and stored in a database on the Web server. 

Figure A- 1 shows the HTML form that collects this input data. The HTML code for the 
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form appears below. Explanatory statements appear in the format < — comments — >. 



<HTML> 

<HEAD> 

<TITLE> WWW/CGI Form Example</TITLE> 

<CENTERxHl>WWW/CGI Form Example</H 1 ></CENTER> 

<HR> 

</HEAD> 

<BODY> 

<FORM ACTION="/cgi-win/cgidemo.exe". METHOD="POST"> 

Your First Name;<BR> 

<INPUT TYPE="text" NAME="firstname"xP> 

Your Last Name:<BR> 

<INPUT TYPE="text" NAME="lastname"xP> 

<HR> 

Branch of Military Service that you are in:<P> 

<INPUT TYPE="radio" NAME="branchservice" VALUE="Army">Army 
<INPUT TYPE="radio" NAME="branchservice" VALUE="Navy">Navy 
<INPUT TYPE="radio" NAME="branchservice" VALUE="Air Force">Air Force 
<INPUT TYPE="radio" NAME="branchservice" VALUE="Marines">Marines<P> 
<INPUT TYPE="submit" VALUE="Press Here!"> 

</FORM> 

</BODY> 

<mTML> 
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Figure A- 1 



The next step is to create the CGI program using Delphi’s Integrated Development 
Environment (IDE). 



1 . To load the IDE click on the icon that resembles a house with columns 

2. You should be presented with a new project. If not select “New” from the “File” 
menu 

3. On the Component Palette, click on the CGI speed tab, click on the first CGI icon, 
then click in the form window. The first CGI icon (CGIEnvData) loads general 
scripting information to your form, the second (CGIDB) adds database specific 
components which will not be used in this example. 



70 




4. The CGI element icon should have black boxes in the corners to indicate that it is 
selected. Look at the Object Inspector window. The ‘properties’ tab should be 
selected. All of the default values are acceptable. If you click on the ‘events’ tab you 
should not see any available events. 

5. Click on a blank spot in the form window to deselect the CGI element. Now let’s 
look at the Object Inspector window. Make sure that the ‘properties’ tab is selected. 
For this example, all of the default values are acceptable. These values and their 
meanings are covered in section three of this tutorial. 

6. Now, click on the ‘events’ tab in the object inspector. This is a list of things that will 
happen when the user initiates certain actions. I want this application to create a form 
when it is called, so click on the box next to “OnCreate”. Now type a name for a 
procedure which will create a form (I used the name FormCreate in the example. You 
may use any number of characters, but no spaces). After you type the name, hit 
‘enter’, this will bring up the code editor window. The following code will already 
have been added for you: 



unit Main; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, IniFiles, CGI, DB; 

type 

TForml = class(TForm) 
procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Forml: TForml; 
implementation 
{$R*.DFM} 

procedure TForml. FormCreate(Sender: TObject); 
begin 
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end; 

end. 



7. The cursor will be after the begin statement. You will now write the code that will a) 
get data from the HTML form, and b) create the new page using that data. 

8. The first step is to declare variables that the Delphi application will use. The variable 
declaration section comes before the ‘begin’ statement and after the ‘procedure’ 
statement. You will need to declare one variable for each ‘INPUT NAME’ or 
‘SELECT NAME’ in the HTML document. Note: to avoid confusion, use different 
variable names than what ‘NAMES’ were in the HTML document. Since we are 
reading in text from the form, the variables will be set to type ‘string’. The variable 
declarations section for this example is as follows: 



var 

FirstName : String; 
LastName ; String; 
Branchservice : String; 



9. Now move the cursor past the ‘begin’ statement. Since this procedure uses 
CGIEnvData, we must add the line: with CGIEnvDatal do The ‘ 1’ on the end 
tells Delphi that this will be the first instance of CGIEnvData. 

10. Now on a new line type: begin This starts the procedure to gather and use the data. 

11. After this second ‘begin’ statement, three statements must be added which are 
required in ALL WEBSITE Delphi applications. They are: 

webSitelNIFilename := paramstr(l); 

application. onException := cgiErrorHandler; 

application.processMessages; 

12. The next line to be added: createStdout; tells Website that an HTML form 

will be created. 

13. The next line is: sendPrologue; This statement is accomplished before the 

creation of the new HTML document and is the beginning of the section where you 
will gather the user’s data. In the following section, you will be setting the Delphi 
variables you declared earlier, equal to the ‘INPUT NAMES’ from the form. The 
format for that is: 

variable := getSmallField( ‘INPUT NAME’ or ‘SELECT NAME’ ); 

In the example this section was as follows: 

FirstName := getSmallField('firstname'); 

LastName := getSmallField('lastname'); 

Branchservice := getSmallField('branchservice'); 
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14. Now that you have collected the data, you will create the new HTML document via 
the ‘send’ command. The general format is; 

send( ‘<HTML tag>’ + variables + ‘regular text’ ); 

Note that items within the ( ) can be in any order, so long as proper HTML is 
used. The key here is that variables may be included and are indicated by not being 
enclosed in quotes. There are a few special ‘send’ commands such as ‘sendHR’ and 
‘sendTitle’ that should be self-explanatory. 

15. The following is a completion of the new HTML document: 



send('<HTMLxHEAD>’); 

send( '<TITLE> WWW/CGI Example</TITLEx/HEAD>’); 

send('<BODY BGCOLOR="#FFFFFF"xHR>Hello ' + FirstName + " + LastName + ’, 

<P>’); 

send('The Request Method is <B>' + RequestMethod + ’</B>.<BR>'); 

send('The Server Name is <B>' + ServerName + '</B>.<BR>'); 

send('Your IP Address is <B>’ + RemoteAddress + '</B>.<P>'); 

send('Sir, the time on deck is <B>' + DateTimeToStr(Now)+ '</BxPxHR>'); 

send('You are employed by the <B>’ + Branchservice + '</B>.'); 

send(’</BODYx/HTML>’); 



16. Now that the new form is complete you must tell Website. The next line is: 
closeStdout; 

17. Then: end; 

18. Now the applications opened just after the ‘begin’ statement must be closed via the 
command: closeApp( application ); 

19. Now another: end; to close the procedure 

20. And one more: end; to close the entire application 

21. Now let’s save the project. Select File I Save project as 

22. Delphi will prompt you to enter a name for the code you have just written. This name 
must be different than the name of the executable file which Delphi asks for next. For 
instance, if you planned to have the executable named “Madlib.exe” as in this 
example, you should name the .PAS (short for Pascal no doubt) something else. I 
used “Madlibpr.pas”. Now Delphi will ask for your project name. This is the time to 
enter the executable program’s name. 

23. You are now ready to compile! From the top menus, select Options I Project. The 
‘Project Options' window will open. On the quick tabs, select 
‘Directorie.s/Conditionals’. The field ‘Output Directory’ is blank. This field indicates 
the directory where you want the compiled executable to be placed. Click on the 
down arrow to the right of the field and you will be given a choice of directories that 
you have previously entered. ‘C:\website\cgi-win’ is the directory for Windows CGI 
applications, so select that from the list or type it in manually. Click ‘OK’. 
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24. Now from the menu, select Compile I Compile. If you have any errors in your code, 
they will be highlighted in red. A vaguely helpful message will be displayed at the 
bottom of the window. Note that semi-colons or the absence of semi-colons is very 
important. One misplaced semi-colon can cause many errors. Generally spaces are 
not important to Delphi. Also notice that some words become bold when you type 
them (i.e. var, procedure, begin, etc.) these words are key words and may not be 
used elsewhere in your script. 

25. Once your code has compiled, you are done. Exit Delphi and fire up your web 
browser. A complete copy of the example code follows on the next two pages. 
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unit Main; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, IniFiles, CGI, DB; 
type 

TForml = class(TForm) 

CGIEnvData 1 :TCGIEnvData; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 
var 

Form 1 ; TForm 1 ; 
implementation 
{$R*.DFM} 

procedure TForm l.FormCreate(Sender: TObject); 
var 

FirstName : String; 

LastName ; String; 

Branchservice ; String; 
begin 

with CGIEnvData 1 do begin 
webSiteINIFilename:=paramstr(l); 
application.onException:=cgiErrorHandler; 
application.processMessages; 

createStdout; 

sendPrologue; 

{Retrieve the user input from the previous form.} 

FirstName := getSmallField('firstname'); 

LastName := getSmallField('lastname'); 

Branchservice := getSmallField('branchservice'); 



send('<HTMLxHEAD>'); 

send( ’<TITLE>WWW/CGI Example<n'ITLEx/HEAD>'); 

send('<BODY BGCOLOR="#FFFFFF"xHR>Hello ’ + FirstName + ” + LastName + ’, 
<P>’); 

send('The Request Method is <B>' + RequestMethod + '</B>.<BR>'); 
send('The Server Name is <B>' + ServerName + '</B>.<BR>'); 
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send('Your IP Address is <B>' + RemoteAddress + '</B>.<P>'); 

send('Sir, the time on deck is <B>’ + DateTimeToStr(Now)+ '</B><PxHR>'); 

send('You are employed by the <B>' + Branchservice + '</B>.'); 

send('</BODYx/HTML>’); 

closeStdout; 

end; 

closeApp(application); 

end; 

end. 
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This example demonstrates, to a modest degree, the amount of manual coding 
required in developing CGI programs using Delphi. Although this may appear 
overwhelming at first, the actual operation of Delphi becomes fairly easy with practice. 
Most of the actions discussed in this example are common to Delphi CGI programing. 
The layout is most always the same, with variable declarations coming first, followed by 
standard WEBSITE statements, followed by prologue operations, followed by Web page 
creation. 

The object oriented programming language used by Delphi is Object Pascal, a 
close relative of Pascal. General programming techniques were not included in this 
discussion. It is assumed that the Delphi user has some programming knowledge. Also, 
Delphi comes with an extensive online help system that covers many programming 
basics. Delphi also has built-in interactive tutors which include a demonstration of how 
to build an application (non-CGI only). 
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APPENDIX B. DATABASE TABLES 



There were three database tables designed for this portion of the project. Salsa, a 
shareware database design tool [Ref. 13], was used in their design. The first two tables, 
Review.DB and Master.DB, are used in the identification and authentication of 
reviewers and the Master Reviewer, respectively. The Reviews.DB table is used for 
storing article review data generated during the review process. The Semantic Object 
Diagram for these three new tables is depicted in Figure B-1. 
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ID RNumber 
Paper_N umber 
Title 
Vote 
Review 
Year 



SUBK^ISSI 



0.1 




MASTER 



ID Identifier-Numeric 
MasterlD 
Password 



Figure B- 1 




APPENDIX C. ON-LINE ARTICLE REVIEW SUB-SYSTEM CODE 



This appendix contains the HTML and Delphi code for the HTML documents and 
Delphi executables that comprise the On-line Article Review Sub-system. The 
relationships of the programs are depicted in Figure C-1. 



On-line Article Review System 




Figure C - 1 . 



81 



The On-line Article Review System log-on page: Review30.htm 

<HTML> 

<HEAD> 

<TITLE>On-line Article Review Systemc/TITLE> 

</HEAD> 

<BODY bgcolor=FFFFFF> 

<centerxHl>On-line Article Review Systemc/centerx/H I > 

<P> This page is intended for the exclusive use of Reviewers for 
the Asilomar Conference on Signals, Systems, & Computers. 

<FORM ACTION=”../cgi-win/Revpwd.exe " METHOD=’TOST”> 

<HRxCENTER> 

<B>Reviewer ID: </BxINPUT NAME="ReviewerID" Size=”25" TYPE="texr> 

<B>Password: c/BxINPUT NAME="pwd" Size="20" TYPE=” password "> 

<PxINPUT TYPE=”submit" Value="Submit Password"> <INPUT TYPE="reset’" 
VALUE='’Clear Values"x/CENTER> 

<PxhrxP> 

<IMG SRC="asil2b0.gif " align=left alt=” Asilomar facility"> 

Go to the <A 

HREF=”http://XXX.XXX.XXX.XXX/submit)lndex.htm">On-line Submission Page</AxBR> 
</BODY> 

</HTML> 
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The Review Sub-system Main Menu: Revpwd.exe 



unit Rev_pwd; 

{This is the main menu form for the Review System. It allows reviewers to review articles and to edit 
reviews. ) 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 

Forms, Dialogs, Cgidb, Cgi, DBTables, DB; 

type 

TForml = class(TForm) 

Query 1: TQuery; 

DataSourcel: TDataSource; 

Tablet: TTable; 

CGIEnvDatal: TCGIEnvData; 

CGIDB FTCGIDB; 

Query 1 Password: TStringField; 

Table IReviewerlD: TStringField; 

Table 1 Password: TStringField; 
procedure FormCreate(Sender: TObject); 
private 

{ Private declarations ) 
public 

( Public declarations } 
end; 

var 

Forml: TForml; 

dReviewerlD: string; 
dpwd: string; 
dbpassword: string; 
dflag: string; 

implementation 

($R *.DFM} 

procedure TForm 1 .FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 

createStdout; 

sendPrologue; 

{ Get fields from search page } 
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dReviewerID:= getsmallfield ('ReviewerlD'); 
dpwd:= getsmallfield ('pwd’); 
dflag:= getsmallfield ('flag'); 

send C<HTML><HEAD>'); 

SendTitle('On-line Article Review System'); { Every page gets this } 
send C</HEAD><BODY bgcolor=FFFFFF>’); 

end; 

{ Retrieve Password of the given User} 
with Query 1 do begin 

close; 
sql. clear; 

sql.add('Select * FROM Review WHERE ReviewerlD = + dReviewerlD + ""); 

open; 

Table 1. Open; 

Table 1. First; 

dbpassword := fieldByName('Password').Asstring; 

Table 1. Close; 
end; 

with CGIEnvDatal do begin 

{Determine whether password was correct} 

if (dbpassword = dpwd) or (dflag = T) then begin {password correct or flag set} 

send('<center><Hl>On-line Article Review Systemc/Hl></center>'); 
sendhr; 

send('<center><h3>Review Functions</h3></center>’); 

{ Review abstracts data Button } 

send('<P><FORM ACTION-'. ./cgi-win/Artrev.exe" METHOD="POST">'); 
send('<INPUT NAME="flag" TYPE="hidden" Valuer"! ">'); 
send('<INPUT TYPE="hidden" Name="ReviewerID" Value="'+dReviewerID+'">'); 
send('<P><center><INPUT TYPE="submit" Value="Review an Abstract"> 
</centerx/FORM>'); 

{Edit a Review button} 

send(’<PxFORM ACTION="../cgi-win/Editrev.exe" METHOD="POST">’); 

send('<INPUT NAME="flag” TYPE="hidden" Value=’T’>’); 

send('<INPUT TYPE="hidden" Name="ReviewerID" Value='"+dReviewerID+’">’); 

send('<PxcenterxINPUT TYPE="submit" Value="Edit a Review"> 

</centerx/FORM>'); 

end 

else begin {Password **incorrect**} 

send('<centerxHl>On-Line Article Review System</Hlx/center>'); 
sendhr; 

send('<center><H2>Your password was <strong>not accepted! !</strong> 

</H 2x/ce n ter>' ) ; 

send C<P>Please ensure that you are authorized to access this information.'); 
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send C<P>If you made an error, then please <A HREF="../review/review30.htm'*>try 
to login again. </A>’); 

send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or 
criminal'); 

send ('prosecution for your actions. <BR>'); 
end; (flag incorrect} 

send ('<P><hrxP><IMG SRC="../review/asil2b0.gif " align=left alt="Asilomar 
facility">'); 

send ('</BODYx/HTML>'); 

closeStdout; 

closeApp( application ); 

end; (with cgiEnvDatal do) 

end; (FormCreate) 

end. 
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The Article Review Search Menu: Artrev.i 



unit Art_rev; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB 1: TCGIDB; 

DataSourcel: TDataSource; 

Query 1: TQuery; 

Tablel: TTable; 

Table2: TTable; 

Table2ANumber: TIntegerField; 

Table2FName: TStringField; 

Table2LName: TStringField; 

Table2Initial: TStringField; 

Table2Honorific: TStringField; 

Table2Institution: TStringField; 

Table2Department: TStringField; 

Table2Mailstop: TStringField; 

Table2Address_Street: TStringField; 

Table2Address_City: TStringField; 

Table2Address_State: TStringField; 

Table2Address_Zip: TStringField; 

Table2Country: TStringField; 

Table2Phone_LocalNumber: TStringField; 

Table2Phone_AreaCode: TStringField; 

Table2Phone_FaxNumber: TStringField; 

Table2Email: TStringField; 

Table3: TTable; 

Query 1 Number: TIntegerField; 

Table3Number: TIntegerField; 

Table3Name: TStringField; 

Table 1 Paper_N umber: TIntegerField ; 

TablelTitle: TStringField; 

Tablellnvited: TStringField; 

Tablel Accepted: TStringField; 

Table IContactAuthorNumber: TIntegerField; 

Tablel Session: TStringField; 

Table lOrderInSession: TStringField; 

Tablel PresentationTime: TStringField; 

Tablel Keyword 1: TStringField; 

Tablel Key word2: TStringField; 

Tablel Key word3: TStringField; 

Tablel Abstract: TMemoField; 

Table 1 ContactOrder: TStringField; 

TablelFName2: TStringField; 

Table lLName2: TStringField; 

Tablellnitial2: TStringField; 
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Table lInstitulion2: TStringField; 

Table I0rder2: TStringField; 

Table lFName3: TStringField; 

Table ILNameS: TStringField; 

Tablellnitial3: TStringField; 

Table 1 Institution3 : TStringField; 

TablelOrder3: TStringField; 

Table lFName4: TStringField; 

Table lLName4: TStringField; 

Tablellnitial4: TStringField; 

Table lInstitution4: TStringField; 

Table 10rder4: TStringField; 

Table lFName5: TStringField; 

Table lLName5: TStringField; 

Table 1 Initials: TStringField; 

Table 1 Institutions : TStringField; 

Table lOrderS: TStringField; 

TablelFNameb: TStringField; 

Table ILNameb: TStringField; 

Tablellnitial6: TStringField; 

Table 1 Institution6: TStringField; 

TablelOrderb: TStringField; 

Query IName: TStringField; 
procedure FormCreate(Sender: TObject); 

private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Form 1 : TForm 1 ; 
dflag: string; 
dReviewerlD: string; 
dbOption: string; 

i: integer; {loop control variable} 

implementation 
($R *.DFM) 

procedure TForm l.FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINIFilename:=paramstr(l); 
application. onException:=cgiErrorHandler; 
application. processMessages; 

createStdout; 

sendPrologue; 



send ('<HTML><HEAD>’); 
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SendTitle(’On-Line Article Review System’); 
send C</HEAD><BODY bgcolor=FFFFFF>'); 

( Determine whether flag is valid } 

dflag:= getsmallfield (’flag'); 
dReviewerID:= getsmallfield ('ReviewerlD'); 

if (dflag = ’1') then begin {flag is set} 

send('<center><Hl>On-Line Article Review System</Hlx/center>'); 
sendhr; 

send('<p>In order to review an article, you may select'); 
send(’from one of the search options below:</p>'); 



{Search by Keyword) 

send('<P><FORM METHOD=”POST" ACTION="../cgi-win/ArtSrch2.exe">'); 
send('<INPUT TYPE="hidden" Name="flag" Value=" 1 ">'); { send flag for verification } 

send(’<INPUT TYPE="hidden" Name="Type" Value="keyword">’); 
send(’<INPUT TYPE="hidden" Name="ReviewerID" Value='"+dReviewerID+'">'); 

sendhr; 

sendhdr ('3', 'Choose from a list of Articles with the following keyword;’); 

{Pull Keywords from KEYWORD Table and display on pull-down menu) 

with Query 1 do begin 
close; 
sql. clear; 

sql.add('Select * FROM Keyword '); 
open; 

{Move records from query result to stringlist) 

Tables. open; 

Table3. first; 

send(’<P><CENTERxB>Keyword: </BxSELECT NAME=’'Keyword”>'); 
send('<OPTION> Do not search on this field'); 

while not TableS.EOF do begin 
dbOption:= Table3.fieldByName('Name’).Asstring; 
send(’<OPTION> ' +dbOption+ "); 

Tables. next; 

end; {for all records in the query result) 
send(’</SELECTx/CENTER>’); 
end; {withQueryl} 

send('<PxCENTERxINPUT TYPE="submit" Value="Show me a list of Articles like this"> ’); 
send('<INPUT TYPE="reset" VALUE=”Reset Field ”x/CENTERx/form>’); 

{Search by Author Name) 

send(’<PxFORM ACTION="../cgi-win/ArtSrch2.exe” METHOD="POST">’); 
send('<INPUT TYPE="hidden" Name="flag" Value="l">'); {send flag for verification) 
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send('<INPUT TYPE="hidden" Name='Type" Value="author">’); 
send('<INPUT TYPE=” hidden" Name="ReviewerID" Value="'+dReviewerID-i-'">'); 

sendhr; 

sendhdr ('3', 'Choose from a list of Articles by this Author?'); 

send C<P><CENTER><B>Author First Name: </BxINPUT NAME="fname" Size="25" 
TYPE="text">'); 

send C<P><B>Author Last Name: c/BxINPUT NAME="lname" Size="25" TYPE="text">'); 

send('<PxINPUT TYPE="submit" Value="Find an Article by this Author"> '); 
send('<INPUT TYPE="reset" VALUE="Clear Names "x/CENTERx/form>'); 

{Display Article with this Paper Number} 

send('<PxFORM ACTION="../cgi-win/ArtSrch2.exe" METHOD="POST">'); 
send('<INPUT TYPE="hidden" Name="flag" Value="l">'); 
send('<INPUT TYPE="hidden" Name="Type" Value="number">'); 
send('<INPUT TYPE="hidden" Name="ReviewerID" Value='"+dReviewerID+'">'); 

sendhr; 

sendhdr ('3', 'Enter the Paper Number of the article of interest:'); 

send ('<CENTERxB>Paper Number: </BxINPUT NAME="Paper_Number" TYPE=TEXT>’); 
send(’<PxINPUT TYPE="submit" Value="Show me this this article. "> '); 
send('<INPUT TYPE="reset" VALUE="Reset Field" ></CENTERx/form>'); 

(Display ALL Paper Titles) 

send('<PxFORM ACTION="../cgi-win/ArtS rch2.exe" METHOD="POST">'); 
send('<INPUTTYPE="hidden" Name="flag" Value="l">’); 
send('<INPUT TYPE="hidden" Name="Type" Value="all">'); 
send('<INPUT TYPE="hidden" Name="ReviewerID" Value="’+dReviewerID-f'">'); 

sendhr; 

sendhdr ('3', 'Choose from a list of ALL Article Submissions?'); 

send('<PxCENTERxINPUT TYPE="submit" Value="Show me a list of ALL of the Paper 
Titles."x/CENTERx/FORM>'); 



sendhr; 

send('<PxFORM ACTION=".7cgi-win/Re vpwd.exe" METHOD="POST">’); 
send('<INPUT TYPE="hidden" Name="flag" Value=" 1">'); 

send('<INPUT TYPE="hidden" Name="ReviewerID" Value='"+ dReviewerlD +'">’); 
send('<PxCENTERxINPUT TYPE="submit" Value="Return to the On-Line Article Review Options 
Page"x/CENTERx/FORM>'); 
send ('</BODYx/HTML>’); 
closeStdout; 
closeApp( application ); 

end (flag is set) 

else begin { flag **incorrect** ) 

send C<centerxH2>On-Line Article Review System</H2x/center>'); 
sendhr; 
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send (’<centerxH2>Your password was <strong>not accepted !!</strong></H2x/center>'); 
send C<P>Please ensure that you are authorized to access this information.'); 

send C<P>If you made an error, then please <A HREF=".. /revie w/Review30.htm">try to login again. </A>’); 
send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
send ('prosecution for your actions. <BR>'); 

send C<PxhrxPxIMG SRC="../review/asil2b0.gif " align=left alt=”Asilomar facility">'); 
send C</BODYx/HTML>'); 
closeStdout; 
closeApp( application ); 

end; {flag **incorrect**} 

end; {with cgiEnvDatal do} 

end; {FormCreate} 

end. {Application} 
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The Article Review Search Result page: Artsrch2.exe 



unit Ar_srch2; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TForm 1 = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

Query2: TQuery; 

DataSource2: TDataSource; 

CGIDB2: TCGIDB; 

CGIDB3: TCGIDB; 

Query3: TQuery; 

Table4: TTable; 

DataSource3: TDataSource; 

Table4ANumber: TIntegerField; 

Table4LName: TStringField; 

Table4FName: TStringField; 

CGIDB 1: TCGIDB; 

DataSourcel: TDataSource; 

Query 1: TQuery; 

Table2: TTable; 

Table3: TTable; 

Table3ANumber: TIntegerField; 

Table3LName: TStringField; 

Table3FName: TStringField; 

Table2ANumber: TIntegerField; 

Table2LName: TStringField; 

Table2FName: TStringField; 

Table 1: TTable; 

Table lPaper_Number: TIntegerField; 

TablelTitle: TStringField; 

Tablel Invited: TStringField, 

TablelAcceptcd: TStringField; 

Table 1 Contact AuthorN umber: TIntegerField; 

Tablel Session: TStringField; 

Tablel OrderlnScssion: TIntegerField; 

Table IPresentationTime: TStringField; 

Table 1 Keyword 1 : TStringField; 

Tablel Key word2: TStringField; 

Tablel Key word3: TStringField; 

Tablel Abstract: TMcmoField; 

Table IContactOrdcr: TStringField; 

TablelFNamc2: TStringField; 

TablelLName2: TStringField; 

Tablellnitial2: TStringField; 

Table lInstitution2: TStringField; 

Table 10rder2: TStringField; 

TablelFName3: TStringField; 

Table lLName3: TStringField; 
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Table llnitial3: TStringField; 

Table 1 Institutions: TStringField; 

Table 1 Orders : TStringField; 

Table lFName4; TStringField; 

Table lLName4: TStringField; 

Table llnitial4: TStringField; 

Table lInstitution4: TStringField; 

Table 10rder4: TStringField; 

Table IFNameS: TStringField; 

Table ILNameS: TStringField; 

Tablellnitial5: TStringField; 

Table 1 Institutions: TStringField; 

Table lOrderS: TStringField; 

Table lFName6: TStringField; 

Table ILNameb: TStringField; 

Table llnitial6: TStringField; 

Table llnstitutionb: TStringField; 

Table 10rder6: TStringField; 

Table! Year: TStringField; 

CGIDB4: TCGIDB; 

Query 4: TQuery; 

DataSource4: TDataSource; 

Tables: TTable; 

Query4ANumber: TIntegerField; 

Query4FName: TStringField; 

Query4LName: TStringField; 

TableSPaper_Number: TIntegerField; 

TableSTitle: TStringField; 

TableSContactAuthorNumber: TIntegerField; 
procedure FormCreate(Sender: TObject); 

private 

{ Private declarations } 
public 

{ Public declarations ) 
end; 

var 

Forml : TForml; 

function MixCaseStr(S: string): string; 
implementation 
{$R*.DFM} 

I >|c>|!s|e>|«sK ******** Hi******** 51c****** sic******* He************** 

function MixCaseStr(S: string): string; 

{ This function converts a string to Mixed case. 

That is Capital first letter and the rest lower case. } 
var 

i: integer; 
begin 



if (S[l] >= 'a') and (S[l] <= 'z’) then 
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Dec(S[l], 32); 

for i := 2 to Length(S) do 

if (S[i] >= 'A') and (S[i] <= 'Z‘) and (S[i-1]<>’ ') and (S[i-l]<>'e‘) and (S[i-l]<>'-‘) and (S[i-I]o'c’) then 
Inc(S[i], 32); 

MixCaseStr := S; 

end; 



procedure TForm 1 .FormCreate(Sender: TObject); 
var 

i, count: integer; {loop variable} 

temp:string; 

countstr: string; 

dPaper_Number: string; 

dANumber: string; 

dTitle: string; 

dflag: string; 

dReviewerlD: string; 

dtype: string; 

dfnamein: string; 

dlnamein: string; 

dFName: string; 

dLName; string; 

dHonorific: string; 

dinstitution; string; 

dfirst: string; 

dlast: string; 

dContactAuthorNumber: string; 

dInstitution2: string; 
dkeyword: string; 

MySelector: integer; 

Selector: integer; 

TC: TDataSet; 

begin 

with CGIEnvDatal do begin 
(Standard Header) 
webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 
createStdout; 
sendPrologue; 

(HTML Header) 

send C<HTMLxHEAD>’); 

SendTitle('On-Line Article Review System'); 
send ('</HEADxBODY bgcolor=FFFFFF>'); 

(Determine whether flag is valid) 
dflag:= getsmallfield ('flag'); 
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{Get ReviewerlD} 

dReviewerID:= getsmallfield ('ReviewerlD'); 
if (dflag = T) then begin (flag is set} 

send('<center><Hl>On-Line Article Review System</Hl></center>'); 
sendhr; 

{ Get type from search page } 

dtype:= getsmallfield ('type'); { Flag to determine type of search } 

{Decide what action is required) 

if dlype = 'keyword' then MySelector := 1 ; 
if dtype = 'author' then MySelector := 2; 
if dtype = 'number' then MySelector := 3; 
if dlype = 'all' then MySelector := 4; 

case MySelector of 

1 : begin {Keyword} 

send(’<PxFORM METHOD="POST" ACTION=”../cgi-win/ArtView2.exe">'); 
send('<INPUT TYPE="hidden" Name="flag" Value="l">'); 

send('<INPUT TYPE="hidden" Name="ReviewerID" Value="'-fdReviewerID+'">’); 

dkeyword:= getsmallfield ('keyword'); 

if dkeyword = 'Do not search on this field' 
then begin 

sendhdr('2','<CENTER>You must first select a keyword !</CENTER>’); 
send('</FORM>’) ; 

end {if nothing selected} 

else begin (Keyword) 

{Find the list of Titles based on keyword search) 
with Quer>'2 do begin 
close; 
sql. clear; 

sql.addCSclcct ^ FROM Submissi WHERE '); 

{ Keyword) 

if (dkeyword <> 'Do not search on this field’) and (sql.count >= 2) then 
sql. add (’ and ’); {need an ’and’ between statements) 

if (dkeyword <> 'Do not search on this field') then 
sql.add(’( Keyword l='"+dkeyword+'" or Keyword2='"+dkeyword+'" or 
Keyword3=’"+dkeyword+’")’); 

sql.add( 'Order by Title' ); 
open; 

count:= Recordcount; 
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countstr:= intlostr (count); 



if recordcounl = 0 then begin 

sendhdr(’2', There were no records that matched your query!'); 
send('</FORM>'); 
end 

else begin 

send(’<CENTER>There are '+countstr+' Titles that match your request. Select the '); 
send('article that you would like to review and press submit.</p>'); 

(Build list of Titles} 

send(’<TABLE BORDERS); 

send('<TRxTH>Paper #oTH><TH>Title</TH><TH>Author</THx/TR>'); 

While not Query 2.EOF do begin 

dTitle:= fieldbyname('Title').asstring; 

dPaper_Number := fieldbyname('Paper_Number').asstring ; 

dANumber:= fieldbyname('ContactAuthorNumber').asstring; 

(Get Author Name information from the AUTHOR Table) 
with Table3 do begin 

(Move to proper record) 

open; 

first; 

while fieldbyName('ANumber’).asstring <> dANumber do 
next; 

(Retrieve Author Name information) 

dFName := fieldByName(’FName'),AsString; 
dLName := fieldByName('LName').AsString; 
close; 

end; (with Table3) 

send C<TRxTDxINPUT TYPE="radio" NAME="Paper_Number" 
Value='"+dPaper_Number+"’xB> '+dPaper_Number+'c/Bx/TD>'); 

send ('<TD>'+dTitle+'</TDxTD>'+dFName+' '+dLName+’</TDx/TR>'); 
next; 

end; (while not EOF) 

send(’</TABLEx/CENTER>'); 

close; 

send('<PxCENTERxINPUT TYPE=”submit" Value="Select this Paper for 
Re vi e w " x/CENTERx/FORM>’ ) ; 

end; (else) 
end; (keyword) 
end; (query2) 
end; (case Keyword) 

2: begin (author) 

send('<P><FORM METHOD="POST" ACTION="../cgi-win/ArtView2.exe">’); 
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send('<INPUT TYPE="hidden” Name="flag” Value=’T'>'); 

send(’<INPUT TYPE=’'hidden” Name=”ReviewerID" Value="'+dReviewerID+"’>'); 

{Get Author Name) 
dFNamein:= getsmallfield ('fname'); 
dfname:= MixCaseStr(dFNamein); 

dLNamein:= getsmallfield (’Iname'); 
dlname:= MixCaseStr(dLNamein); 

{ Find out if name is in contact authors. Only the last name is required, 
but the first name will help narrow the search. } 

if (dlname <> ") then begin 

(Search for name in AUTHOR Table) 
with Query4 do begin 
close; 
sql.clear; 

{ If both the first and last name is given, search for match on both ) 

if (dfname <> ") then 

sql.addfSelect * FROM Author WHERE FName=’”+dfname+'" and LName=’"+dlname+"") 

{ Only the last name is given, so search only on it ) 

else 

sql.addCSelect * FROM Author WHERE LName=’"+dlname+”"); 

(execute the Query) 
open; 

{ Display results ) 
send C<P><center>'); 

If Recordcount > 0 then begin 

send('<CENTER>Here is the article(s) by the author you requested.<P>’); 
send('<CENTERxTABLE BORDER>'); 

send('<TR><TH>Paper #</TH><TH>Title</TH><TH>Author</THx/TR>’); 

While not Query4.EOF do begin 

dFName := fieldByName('FName’).AsString; 
dLName := fieldByName('LName’).AsString; 
dContactAuthorNumber:= fieldbyname(’ANumber').asstring; 

(Get Author Name information from the AUTHOR Table) 
with Table5 do begin 

(Move to proper record) 

open; 

first; 

while fieldbyName(’ContactAuthorNumber').asstring <> dContactAuthorNumber do 
next; 

{ Retrieve Author Name information) 
dTitle := fieldByName(Title’).AsString; 
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dPaper_Number := fieldByNameCPaper_Number’).AsString; 
end; {with TableS} 

send ('<TRxTD><INPUT TYPE="radio" NAME=”Paper_Number" 
Value=’"-i-dPaper_Number+”'><B> ’+dPaper_Number+'</B></TD>'); 

send C<TD>’+dTitle+’</TD><TD>’+dFName+' ’+dLName+'c/TD></TR>’); 
next; 

end; (while not EOF} 

send('</TABLEx/CENTER>’); 

close; 

send(’<P><CENTERxINPUT TYPE=”submit” Value=”Select this Paper for 
Review"></CENTERx/FORM>’); 

end 

else begin (The name is not a Contact Author. } 

sendhdr(’2’, There are no authors in the database with the name <B>’ + dfname + ' ’ + dlname + ’</B>. 
send(’</FORM>’); 

end; (if recordcount > 0} 

end; {withQuery4} 

end (If dlname <>** then) 

else begin 

sendhdr(’2’,'<CENTER>You must enter a last name!</CENTER>’); 
send(’</FORM>’); 

end; (If dlname <>” else} 

end; (case author} 



3 : begin (Paper Number search} 

send('<PxFORM METHOD=TOSr’ ACTION=’*../cgi-win/ArtView2.exe">’); 

send(’<INPUT TYPE="hidden” Name="flag" Value='T’>’); 

send('<INPUT TYPE="hidden" Name="ReviewerID” Value='”+dReviewerID+’">*); 

dPaper_Number:= getsmallfield ('Paper_Number'); 

(Get Paper Information from Submissi Table} 
with QueryS do begin 
close; 
sql.clear; 

sql.add(’Select * FROM Submissi'); 

sql.add(’Where Paper_Number = '+dPaper_Number+"); 

open; 



if recordcount = 0 then begin 
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sendhdr('2','<CENTER>There Are no records that match your request!</CENTER>'); 
send('</FORM>'); 
end 

else begin 

send(’<CENTER>Here is the article that matches your request.<P>'); 
send(’<CENTER><TABLE BORDER>’); 

send(’<TRxTH>Paper #</TH><TH>Title</TH><TH>Author</THx/TR>’); 

While not Query3.EOF do begin 

{ Build the check boxes of Titles} 
dTitle:= fieldbyname('Title').asstring; 
dPaper_Number:= fieldbyname(Taper_Number').asstring; 
dANumber:= fieldbyname(*ContactAuthorNumber’).asstring; 

{Get Author Name information from the AUTHOR Table) 
with Table4 do begin 

(Move to proper record) 

open; 

first; 

while fieldbyName('ANumber’).asstring <> dANumber do 
next; 

(Retrieve Author Name information) 
dFName := fieldByNameCFName').AsString; 
dLName := fieldByNameCLName’).AsString; 
end; (with Table4) 

send C<TR><TDxINPUT TYPE="radio” NAME=’Taper_Number" 
Value='”+dPaper_Number+'”xB> '+dPaper_Number+'</Bx/TD>’); 

send C<TD>'+dTitle+’</TDxTD>'+dFName+' '+dLName+'</TDx/TR>'); 
next; 

end; (while not EOF) 

sendC</TABLEx/CENTER>’); 

close; 

send(’<PxCENTERxINPUT TYPE="submit" Value=”Select this Paper for 
Review"x/CENTERx/FORM>'); 

end; (if) 

end; {withQuery3} 
end; (Paper Number Search) 

4: begin (ALL) 

send('<PxFORM METHOD=TOST’' ACTION=”../cgi-win/Artview2.exe">‘); 
send(’<INPUT TYPE=”hidden” Name=’*flag" Value=”l">’); 

send('<INPUT TYPE="hidden" Name="ReviewerID” Value='"+dReviewerID+"’>’); 

with Query 1 do begin 

(prepare; { Optimizes query } 
close; 

98 



sql. clear; 

sql.add('Select * FROM Submissi’); 
sqI.add('Order by Paper_Number'); 
open; 

count:= recordcount; 
countstr:= inttostr (count); 

if recordcount = 0 then begin 

sendhdr('2', '<CENTER>There are no records in the database.</CENTER>'); 
send(’</FORM>’); 
end 

else begin 

send('<P>There are '+countstrV articles in the database. Please select the radio button'); 
send('of the article you would like to view and then press the selection button below the 
table. <P>'); 

{ Build list of Titles } 

first; 

send(’<CENTERxTABLE BORDER>’); 

send('<TR><TH>Paper #</TH><TH>Title</TH><TH>Author</TH></TR>’); 

While not Query 1. EOF do begin 

dTitle:= fieldbyname(Title').asstring; 
dPaper_Number:= fieldbyname(’Paper__Number').asstring; 
dANumber:= fieldbyname(’ContactAuthorNumber').asstring; 

{Get Author Name information from the AUTHOR Table} 

with Table2 do begin 

{Move to proper record) 

open; 

first; 

while fieldbyName('ANumber').asstring <> dANumber do 
next; 

{Retrieve Author Name information) 

dFName := fieldByName(’FName’).AsString; 
dLName := fieldByName('LName’).AsString; 
close; 

end; {with Table2) 

send C<TR><TD><INPUT TYPE=”radio" NAME="Paper_Number" 
Value="'+dPaper_Number+’"><B> '+dPaper_Number+'</Bx/TD>'); 

send ('<TD>'+dTitle+'</TD><TD>'+dFName+' ’+dLName+'</TD></TR>’); 
next; 

end; {while not EOF) 

send(’</TABLE>'); 

close; 

sendC<PxINPUT TYPE="submit" Value=”Select a Paper for 
Review"xPx/CENTERx/FORM>'); 

( send(’<INPUT TYPE="reset" VALUE="Reset values"></CENTERx/FORM>'); ) 
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end; {else} 
end; {with Queryl) 
end; {if all) 

end; {case} 

{HTML Footer} 
sendhr; 

send(’<P><FORM ACTION="../cgi-win/Artrev.exe’' METHOD=*’POST">'); 
send('<INPUTTYPE="hidden” Name="flag" Value='T'>’); 

send(*<INPUT TYPE="hidden" Name="ReviewerID" Value= "+dReviewerID+”'>'); 
send('<P><CENTER><INPUT TYPE="submit" Value="Query another 
Article”></CENTER></FORM>'); 

sendhr; 

sendC<PxFORM ACTION=”../cgi-win/Re vpwd.exe" METHOD=‘TOST'’>'); 
sendC<INPUTTYPE="hidden‘’ Name='*flag" Value=‘T’y); 

send('<INPUT TYPE="hidden" Name=’'ReviewerID" Value="'+dReviewerID+'">'); 
send('<P><CENTER><INPUT TYPE="submit" Value=”Return to the On-Line Article Review 
Options Page"></CENTERx/FORM>'); 
send ('</BODYx/HTMLy); 
closeStdout; 
closeApp( application ); 
end (flag is set} 

else begin { flag **incorrect** } 

send C<centerxH2>On-Line Article Review System</H2x/center>'); 
sendhr; 

send C<centerxH2>Your password was <strong>not accepted! !</strongx/H2x/center>'); 
send C<P>Please ensure that you are authorized to access this information.’); 

send C<P>If you made an error, then please <A HREF="../review/Review30.htm">try to login again.</A>’); 
send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
send (’prosecution for your actions.<BR>'); 

send C<PxhrxPxIMG SRC="../review/asil2b0.gif ’’ align=left alt=''Asilomar facility">'); 

send (’Return to the <A HREF="http://xxx.xxx.xxx.xxx/review/Review30.htmr>On-line Article Review 

Page</A>’); 

send (’</BODYx/HTML>’); 

closeStdout; 

closeApp( application ); 

end; {flag **incorrect**} 

end; {with cgiEnvDatal do} 

end; {Procedure TForml.FormCreate} 

end. 
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The Article Review and Vote page: Artview2.exe 



unit Ar_view2; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TForm 1 = class(TForm) 

DataSourcel: TDataSource; 

Table l:TTable; 

CGIEnvDatal: TCGIEnvData; 

CGIDB liTCGIDB; 

Table2: TTable; 

Tables: TTable; 

Query 1: TQuery; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Forml: TForm 1; 

theabstract : TStringList; 
theAuthors : TStringList; 
i, counter: integer; 
dflag: string; 

dbContactOrderInt: integer; 
dbOrder2int: integer; 
dbOrderSint: integer; 
dbOrder4int: integer; 
dbOrderSint: integer; 
dbOrderbint: integer; 

dPaper_Number: string; 
dbOption: string; 
dTitle: string; 
dbANumber: string; 
dbabstract: string; 
dbcontactOrder: string; 

dbfname2: string; 
dblname2: string; 
dbinitial2: string; 
dbinstitution2: string; 
dborder2: string; 
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dbfname3: string; 
dblname3: string; 
dbinitiaB: string; 
dbinstitution3: string; 
dborder3: string; 

dbfname4: string; 
dblname4: string; 
dbinitial4: string; 
dbinstitution4: string; 
dborder4: string; 

dbfname5: string; 
dblname5: string; 
dbinitiaB: string; 
dbinstitution5: string; 
dborder5: string; 

dbfnameb: string; 
dblnameb: string; 
dbinitial6: string; 
dbinstitutionb: string; 
dborderb: string; 

dbFName : string; 
dbLName : string; 
dbHonorific : string; 
dblnitial: string; 
dblnstitution : string; 

dReviewerlD: string; 
dVote: string; 
dRNumber: string; 
dReview: string; 

implementation 

{$R *.DFM} 

procedure TForm 1 .FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do 
begin 

webSiteINIFilename:=paramstr( 1 ); 
application .onException :=cgiErrorHandler; 
application. processMessages; 

createStdout; 

sendPrologue; 

{Send the html page} 
send C<HTMLxHEAD>’); 

SendTitle(’On-Line Article Review System’); 
send (’</HEADxBODY bgcolor=FFFFFF>’); 
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send C<center><Hl>Article Review</Hl></center><HR> ); 

{Get the Paper Number Selected} 
d Paper_Nu mber:= getsm allfi eld ( 'Paper_N u mber' ) ; 
dReviewerlD.- getsmallfield('ReviewerlD'); 

(Determine whether flag is valid) 

dflag:= getsmallfield ('flag'); 

if (dflag = '1') then begin (flag is set) 
counter := 0; 

with Query 1 do { Check the database for Reviewer entry for this submission } 
begin 
close; 
sql.clear; 

sql.add('Select * FROM Reviews WHERE Paper_Number='”+dPaper_Number+"" + 'AND 
ReviewerID="'+dReviewerID+”"); 
open; 

counter := Recordcount; 

if counter = 0 then begin { No records returned } 

(Get the Paper Record from the SUBMISSION Table) 
with Table 1 do begin 

(Move to proper record) 

open; 

first; 

while fieldbyName('Paper_Number').asstring <> dPaper_Number do 
next; 

(Retrieve record) 

dTille:= ficldByName (Title'). asstring; 

dbANumbcr:= ficldByName ('ContactAuthorNumber').asstring; 

CGIDB 1 .mcnioToStringList (fieldbyname ('Abstract'), theabstract); 

dbcontactOrdcr:= ficldByName ('contactOrder'). asstring; 

dborder2:= ficldByName ('order2'). asstring; 
dbfnamc2:= ficldByName ('fname2'). asstring; 
dblnamc2:= ficldByName (’lname2’). asstring; 
dbinsUtution2:= ficldByName ('institution2'). asstring; 

dborder3:= ficldByName ('orderS'). asstring; 
dbfnamc3:= ficldByName ('fname3'). asstring; 
dblname3:= ficldByName ('lname3').asstring; 
dbinsliluiion3:= ficldByName (’institutions'). asstring; 
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dborder4:= fieldByName ('order4’).asstring; 
dbfname4:= ficldByName ('fname4'). asstring; 
dblname4:= ficldByName ('lname4’). asstring; 



dbinstitution4:= fieldByName (*institution4*).asstring; 

dborder5:= fieldByName (’order5').asstring; 
dbfname5:= fieldByName ('fname5’).asstring; 
dblname5:= fieldByName ('lname5').asstring; 
dbinstitution5:= fieldByName (’institution5') asstring; 

dborder6:= fieldByName (’order6').asstring; 
dbfname6:= fieldByName ('fname6').asstring; 
dblname6:= fieldByName (*lname6’).asstring; 
dbinstitution6:= fieldByName ('institution6').asstring; 
close; 
end; 



{Get Author Name information from the AUTHOR Table} 

with Table2 do begin 

(Move to proper record) 

open; 

first; 

while fieldbyName(’ANumber').asstring <> dbANumber do 
next; 

(Retrieve Author Name information) 

dbFName := fieldByName('FName').AsString; 
dbLName := fieldByName('LName').AsString; 
dblnstitution := fieldByName('Institution’).AsString; 

(Determine Order of Authors) 
theAuthors:= TStringList.create; 

(Send the Authors) 

send C<B>Author(s): </BxBR>’); 

if dbContactOrder = " then 

send (' <!>'+ dbFName +' '+ dbLName ‘+dbInstitution+’</I> ') 
else begin 

(Initialize the stringlist) 

for i:= 0 to 6 do 

theAuthors.add('not used’); 

dbContactOrderInt:= strtoint(dbContactOrder); 

theAuthors[dbContactOrderInt]:= " +dbFName+ ' ' +dbLName+ ’+dbInstitution+" 

if dbOrder2 <> " then begin 
dbOrder2Int:= strtoint(dbOrder2); 

theAuthors[dbOrder2Int]:= ”+dbFName2+ ’ ' +dbLName2+ ’+dbInstitution2+"; 
end; 

if dbOrder3 <> " then begin 
dbOrder3Int:= strtoint(dbOrder3); 

theAuthors[dbOrder3Int]:= "+dbFName3+ ' ' +dbLName3+ ’+dbInstitution3+”; 
end; 
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if dbOrder4 <> ” then begin 
dbOrder4Int:= strtoint(dbOrder4); 

theAuthors[dbOrder4Int]:= "+dbFName4+ ' ’ +dbLName4+ '+dbInstitution4+”; 
end; 

if dbOrder5 <> " then begin 
dbOrder5Int:= strtoint(dbOrder5); 

theAuthors[dbOrder5Int]:= "+dbFName5+ ' ' +dbLName5+ ’+dbInstitution5+'*; 
end; 

if dbOrderb <> ” then begin 
dbOrder6Int:= strtoint(dbOrder6); 

theAuthors[dbOrder6Int]:= ”+dbFName6+ ' ’ +dbLName6+ '+dbInstitution6+"; 
end; 

send (’<!>’ +theAuthors[l]+ '</IxBR>’); 
for i:= 2 to 6 do 

if theAuthors[i] <> 'not used' then send (’<!>' +theAuthors[i]+ '</IxBR>’); 
end; {else} 
close; 

end; (withTableZ) 

send (’<INPUT TYPE=”hidden" Name="flag" Value="l">'); 
send (’<H3xB>Title: </B> ” ’ + dTitle + ' " </H3>’); 
send (’<B>Paper Number: </B> ” ’ + dPaper_Number + ' " '); 

send C<PxB>Abstract: </BxP>'); 

for i := 0 to theabstract.count - 1 do 
send( theabstract.strings[i] ); 

theabstract.free; {release the memory held by 'theabstract' } 
sendhr; 

send (’<P>You may view the extended summary for this submission by selecting'); 
send (’file ’+dPaper_Number+' from the<A HREF="../uploads/"> following list<A 
HREF="../uploads/"x/A>.<P>’); 

{Reviewer Input) 
sendhr; 

send C<I>Please cast your vote for this particular article, </IxB> ’+dReviewerID+’:</B>’); 

send('<PxFORM METHOD="POST" ACTION="../cgi-win/add 133.exe" >’); 

send C<INPUT TYPE=”hidden" Name="flag" Value=’"+ dflag 

send C<INPUT TYPE="hidden" Name="Title” Value=’"+ dTitle 

send C<INPUT TYPE="hidden” Name="Paper_Number" Value="’+ dPaper_Number 

send(’<INPUT TYPE="hidden" Name="ReviewerID" Value=”’+ dReviewerlD 

send C<INPUT TYPE="radio" NAME="Vote" VALUE="Strong Accept" CHECK£D> Strong Accept'); 

send C<INPUT TYPE="radio" NAME="Vote" VALUE="Conditional Accept" > Conditional Accept'); 

send (’<INPUT TYPE="radio" NAME="Vote" VALUE=" Reject" > Reject’); 

send (’<INPUT TYPE="radio" NAME=" Vote" VALUE="Undecided" > Undecided'); 

send (’<INPUT TYPE="radio" NAME="Vote" VALUE="Not Qualified" > Not Qualified’); 

send C<PxB>Review comments: </BxP>’); 

send(’<TEXTAREA NAME=’’review" COLS=85 Rows=5 wrap=virtual>’); 
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send(’Enter review comments here. Please limit the length of your review to 100 
words.</TEXTAREA>'); 
sendC '); 
send (’<BR>’); 

send('<P><CENTERxINPUTTYPE="submit" Value="Submit Review 
Info”></CENTERx/FORM>’); 

end 

else if counter <> 0 then begin {Only one record returned} 
send(’<CENTER>You have already reviewed this particular article.</CENTER>'); 
end; (if then else if) 
end; (with Query 1 ) 
sendhr; 

send(’<PxFORM ACTION=”.7cgi-win/ArtRev.exe” METHOD=’TOST">’); 
send(’<INPUT TYPE= ’hidden" Name="flag" Value=’T’>’); 
send('<INPUT TYPE="hidden" Name="ReviewerID" Value=’"+ dReviewerlD 
send(’<PxCENTERxINPUT TYPE="submit" Value=’’Review Another 
Article"x/CENTERx/FORM>'); 

sendhr; 

send(’<PxFORM ACTION="../cgi-win/Revpwd.exe" METHOD="POST">'); 
send(’<INPUT TYPE=’’hidden" Name="flag" Value=’T’>’); 
send(’<INPUT TYPE=" hidden" Name="ReviewerID" Value='"4* dReviewerlD 

send('<PxCENTERxINPUTTYPE="submit" Value="Return to the On-Line Article Review Options 
page"x/CENTERx/FORM>'); 
send C</BODYx/HTML>’); 
closeStdout; 

closeApp( application ); ( don’t leave form around } 

end (flag is set) 

else begin (flag **incorrect**| 

send ('</HEADxBODY bgcolor=FFFFFF>'); 

send C<centerxH2>On-Line Article Review System</H2x/center>'); 
sendhr; 

send (’<centerxH2>Your password was <strong>not accepted !!</strongx/H2x/center>’); 
send C<P>Pleasc ensure that you are authorized to access this information.'); 

send C<P>If you made an error, then please <A HREF="../review/Review30.htm">try to login again. </A>’); 
send (’<P>If you are noi authorized to access this information, please note that a log is’); 
send (’maintained lhai includes your URL. You may be subject to civil and/or criminal ’); 
send ('prosecution for your actions.<BR>’); 



send (’<PxhrxPxIMG SRC="../review/asil2b0.gif " align=left alt=’’Asilomar facility">’); 

send (’Return to the <A HREF="http://XXX.XXX.XXX.XXX/review/Review30.htmr'>On-line Article 

Review Page</A>'); 

send ('</BODYx/HTML>'); 

closeStdout; 
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closeApp( application ); 



end; {flag **incorrect**} 
end; { with CGIEnvDatal } 
end; { with FormCreate} 
end. 



The review confirmation page: Addl33.exe 



unit D133add; 

{WHEN CALLED: This program adds article review data to the Reviews database. 
INPUT: Review data from the Artview2 page. 

ACTION: places Review data into the Reviews Table.} 
interface 
uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 

Forms, Dialogs, Cgidb, Cgi, DBTables, DB; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB liTCGIDB; 

Tablel: TTable; 

DataSourcel: TDataSource; 

Query 1: TQuery; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Form 1 ; TForm 1 ; 
counter: integer; 
thereview : TStringList; 
theabstract : TStringList; 
dstorabs : TStringList; 
dRNumber: string; 
dReviewerlD: string; 
dVote: string; 
dbTitle: string; 
dPaper_Number: string; 
dbAbstract: string; 
dYear: string; 
dflag: string; 

implementation 

{$R*.DFM} 

procedure TForm 1 .FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 
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{Standard Header} 
webSiteINIFilename:=paramstr( 1 ); 
application.onException:=cgiErrorHandler; 
application.processMessages; 

creates td out; 
sendPrologue; 

(Get data from FORM} 
dReviewerID:= getsmallfield (’ReviewerlD'); 
dVote:= getsmallfield (’Vote’); 
dbTitle:= getsmallfield (’Title’); 
dPaper_Number:= getsmallfield (’Paper_Number’); 
dYear := DateToStr(Now); 

thereview := TStringList. create; 

CGIEnvDatal .getTextArea('review’, thereview); 

(Determine whether flag is valid } 

dflag:= getsmallfield (’flag’); 

if (dflag = ’ 1 ’) then begin { flag is set} 
counter := 0; 

with Query 1 do { Check the database for Reviewer entry for this submission } 

begin 
close; 
sql. clear; 

sql.add(’Select * FROM Reviews WHERE Paper_Number="'+dPaper_Number+”” + 'AND 
ReviewerID=’”+dReviewerID+""); 
open; 

counter := Recordcount; 

if counter = 0 then begin (No records returned} 

(Place Data into Reviews Table} 
with Table 1 do 
begin 

{ Append new submission data to Reviews Table } 

open; 

AppendRecord([nif dReviewerlD, dPaper_Number» dbTitle, dVote, nil, dYear]); 
edit; 

CGIDB 1 .StringlistToMemo(thereview, fieldbyname(’Review’)); 
thereview. free; 

last; 

dRNumber:=Table 1 .fieldbyname(’RNumber').asstring; 
close; 

end; (with Reviews} 

(Send the Thank you Paper page with the link to the On-Line Article Review Page} 
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send C<HTMLxHEAD>’); 

SendTitle(’On-Line Article Review System'); 

send C</HEADxBODY bgcolor=FFFFFF>'); 
send C<centeixHl> Article Review</Hlx/center>'); 

sendhr; 

send C<P>Thank you for your input, <B> '+ dReviewerlD +’</B>. '); 

send ('Your information has been added to the article review database. </p>’); 

end 

else if counter <> 0 then begin { Only one record returned } 

{Send the Thank you Paper page with the link to the On-Line Article Review Page} 
send C<HTMLxHEAD>’); 

SendTitle('On-Line Article Review System'); 

send C</HEADxBODY bgcolor=FFFFFF>'); 

send C<centeixHl> Article Review</Hlx/center>'); 

sendhr; 

send ('You have already reviewed this particular article.'); 
end; (if then else if} 
end; (with Query 1} 
sendhr; 

send('<PxFORM ACTION="../cgi-win/Artrev.exe" METHOD="POST">'); 
send('<INPUT TYPE="hidden" Name="flag" Value="l">'); 

send('<INPUT TYPE="hidden" Name="ReviewerID" Value='"+ dReviewerlD 4-'">'); 
send('<PxCENTERxINPUT TYPE=''submit" Value="Query another 
Article"x/CENTERx/FORM>’); 

sendhr; 

send('<PxFORM ACTION="../cgi-win/Revpwd.exe" METHOD="POST">'); 
send(’<INPUTTYPE="hidden" Name="flag” Value="l">'); 

send('<INPUT TYPE="hidden" Name="ReviewerID" Value="’+ dReviewerlD +'”>'); 
send('<PxCENTERxINPUT TYPE="submit" Value="Return to the On-Line Article Review Options 
Page"x/CENTERx/FORM>'); 

send C<PxhrxPxIMG SRC="../review/asil2b0.gif " align=left alt="Asilomar facility">'); 

send C</BODYx/HTML>’); 

closeStdout; 

closeApp( application ); { don’t leave form around } 

end (flag is set} 

else begin (flag **incorrect**} 

send ('c/HEADxBODY bgcolor=FTFFFF>’); 

send C<centerxH2>On-line Article Review System</H2x/center>'); 
sendhr; 
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send ('<center><H2>Your password was <strong>not accepted! !</strong></H2>c/center>'); 
send C<P>Please ensure that you are authorized to access this information.'); 
send C<P>If you made an error, then please <A HREF="../review/Re view30.htm ">try to login 
again. </A>'); 

send C<P>If you are not authorized to access this information, please note that a log is’); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
send ('prosecution for your actions. <BR>'); 

send C<P><hr><P><IMG SRC="../review/asil2b0.gif " align=left alt="Asilomar facility">'); 

send ('Return to the <A HREF=",./review/Review30.htm">On-line Article Review Log-on Page</A>'); 

send C<BR>'); 

send (’</BODY></HTML>'); 

closeStdout; 

closeApp( application ); 

end; { flag **incorrect** } 

end; { with CGIEnvDatal) 

end; {FormCreate} 

end. 
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The edit a review page: Editrev.exe 



unit Edit_rev; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB ETCGIDB; 

Table 1: TTable; 

Query 1; TQuery; 

DataSourcel: TDataSource; 

Table 1 Revie werlD: TStringField; 

Table 1 Vote: TStringField; 

Table 1 Paper_Number : TStringField; 

TablelTitle: TStringField; 

Query ITitle: TStringField; 

Table 1 Review: TMemoField; 

Table IRNumber: TIntegerField; 

Query 1 Paper_Number: TStringField; 

Table2: TTable; 

Table3: TTable; 

Table2Paper_Number: TIntegerField; 

Table2ContactAuthorNumber: TIntegerField; 

Table3ANumber: TIntegerField; 

Table3LName: TStringField; 

Table3FName: TStringField; 
procedure FormCreate(Sender: TObject); 

{procedure CGIDB lSendingHotField(currentRecord: TDataset; 
var s: OpenString);} 



private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Form 1 : TForm 1 ; 



implementation 
($R *.DFM) 

procedure TForm l.FormCreate(Sender: TObject); 
var 



i, count: integer; 



(loop variable} 
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temp: string; 
countstr: string; 
dPaper_Number: string; 
dflag: string; 
dReviewerlD: string; 
dRNumber: string; 
dTitle: string; 
dVote: string; 
dbFName: string; 
dbLName: string; 
dANumber: string; 

begin 

with CGIEnvDatal do begin 
{Standard Header} 
webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 
creates td out; 
sendPrologue; 

(HTML Header) 

send C<HTML><HEAD>'); 

SendTitle('On-Line Article Review System'); 
send C</HEAD><BODY bgcolor=FFFFFF>'); 

{ Determine whether flag is valid } 

dflag:= getsmallfield ('flag'); 
dReviewerID:= getsmallfield ('ReviewerlD'); 

if (dflag = T) then begin (flag is set} 

send('<center><Hl>Edit a Review</Hl></center>'); 
sendhr; 

send(’<PxFORM METHOD="POST" ACTION="../cgi-win/Revview.exe">'); 
send('<INPUT TYPE="hidden" Name="flag" Value=" !">'); 

send('<INPUT TYPE="hidden" Name="ReviewerID" Value="'+dReviewerID+’">'); 



with Query 1 do begin 
prepare; ( Optimizes query } 
close; 
sql.clear; 

sql.add('SELECT * FROM Reviews'); 
sql.add('WHERE ReviewerlD = '"+dReviewerID+""); 
sql.add('Order by Paper_Number’); 
open; 

count:= Recordcount; 
countstr:= inttostr (count); 

send('<CENTER><P>You have ' +countstr+ ' reviews in the database.<P>'); 
first; 

send('<TABLE BORDER>’); 

send(’<TRxTH>Paper #</THxTH>Title</THxTH>Author</THx/TR>’); 
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While not Query 1. EOF do begin 

{Build the check boxes of Titles} 

dTitle:= fieldbyname(Title').asstring; 

dPaper_Number:= fieldbyname('Paper_Number').asstring; 

(Get ContactAuthorNumber from the Submissi Table) 

with Table2 do begin 

{Move to proper record) 

open; 

first; 

while fieldbyName('Paper_Number').asstring <> dPaper_Number do 
next; 

{ Retrieve Author Number) 

dANumber:= fieldbyname('ContactAuthorNumber').asstring; 
end; {with Table2) 

{Get Author Name information from the AUTHOR Table) 

with Tables do begin 

{Move to proper record) 

open; 

first; 

while fieldbyName('ANumber’).asstring <> dANumber do 
next; 

{Retrieve Author Name information) 

dbFName := rieldByName('FName').AsSlring; 
dbLName := fieldByName('LName’).AsString; 

end; {withTableS} 

send('<INPUT TYPE=”hidden" Name="RNumber” Value="'+dRNumber+’">’); 
send (’<TR><TDxINPUT TYPE="radio" NAME="Paper_Number" 
Value=’"+dPaper_Number+'”><B> '+dPaper_Number+'</Bx/TD>'); 

send C<TD>'+dTitle+'</TDxTD>'+dbFName+' '+dbLName+’</TDx/TR>'); 
next; 

end; {while not EOF) 

send(’</TABLEx/CENTER>’); 

send('<P>'); 

close; 

send('<PxCENTERxINPUTTYPE=" submit" Value="Select this Paper for Review"xP>’); 
send('<INPUT TYPE="reset" VALUE="Reset values"x/CENTERx/FORM>’); 
end; {with Query 1} 

{HTML Footer) 
sendhr; 

send('<PxFORM ACTION="../cgi-win/Revpwd.exe" METHOD="POST">’); 
sendC<INPUT TYPE="hidden" Name="flag" Value="l">'); 

send(’<INPUT TYPE="hidden" Name="ReviewerID" Value='"+dReviewerID+'">'); 
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send('<PxCENTER><INPUT TYPE="submit" VaIue="Return to the On-Line Article Review 
Options Page"></CENTERx/FORM>'); 
send (’</BODY>o^TML>’); 
closeStdout; 
closeApp( application ); 

end {flag is set} 

else begin (flag **incorrect**) 

send C<centerxH2>On-Line Article Review System</H2>c/center>'); 
sendhr; 

send (’<centerxH2>Your password was <strong>not accepted! !</strongx/H2x/center>'); 
send C<P>Please ensure that you are authorized to access this information.'); 

send C<P>If you made an error, then please <A HREF="../review/Review30.htm">try to login again. </A>'); 
send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
send ('prosecution for your actions. <BR>'); 

send C<PxhrxPxIMG SRC="../review/asil2b0.gif " align=left alt="Asilomar facility">'); 
send ('<y^ODY><mTML>'); 
closeStdout; 
closeApp( application ); 

end; { flag **incorrect** } 

end; (with cgiEnvDatal do) 

end; (Procedure TForml.FormCreate} 

end. 
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The edit a review page: Revview.exe 



unit Re_view; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TFoiml = class(TForm) 

DataSourcel: TDataSource; 

Table 1: TTable; 

CGIEnvDatal: TCGIEnvData; 

CGIDB liTCGIDB; 

Table2: TTable; 

Tables: TTable; 

Query 1: TQuery; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Form 1 : TForm 1 ; 

theabstract : TStringList; 
theAuthors : TStringList; 
thereview : TStringList; 
i: integer; 

dbContactOrderInt: integer; 
dbOrder2int: integer; 
dbOrderSint: integer; 
dbOrder4int: integer; 
dbOrderSint: integer; 
dbOrder6int: integer; 

dPaper_Number: string; 
dbOption: string; 
dTitle: string; 
dbANumber: string; 
dbabstract: string; 
dbcontactOrder: string; 

dbfname2; string; 
dblname2: string; 
dbinitial2: string; 
dbinstitution2: string; 
dborder2: string; 
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dbfnameS: string; 
dblnameS: string; 
dbinitial3: string; 
dbinstitution3: string; 
dborder3: string; 

dbfname4: string; 
dblname4: string; 
dbinitial4: string; 
dbinstitution4: string; 
dborder4: string; 

dbfname5: string; 
dblname5: string; 
dbinitial5: string; 
dbinstitution5; string; 
dborder5: string; 

dbfname6: string; 
dblnameb: string; 
dbinitial6: siring; 
dbinstitution6: string; 
dborderb: string; 

dbFName : string; 
dbLName : string; 
dbHonorific : string; 
dblnitial: string; 
dblnstitution : string; 

dReviewerlD: string; 
dVote: string; 
dRNumber: string; 
dReview: string; 
dflag: string; 



implementalion 
{$R *.DFM} 

procedure TForm 1 .FormCreate(Sender: TObject); 
begin 

with CGIEnvDalal do 
begin 

webSilclNlFilcnamc:=paramstr( 1 ); 
application. onFxccplion:=cgiErrorHandler; 
applicaiion.processMcssages; 

crealeSldoul; 

sendPrologue; 

{Send the html page} 
send C<HTMLxHEAD>'); 
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SendTitle('On-Line Article Review System’); 

send (’</HEADxBODY bgcolor=FFFFFP>'); 

send C<center><Hl>Edit a Review</Hl></centerxHR>’); 

{Determine whether flag is valid} 

dflag:= getsmallfield (’flag'); 

if (dflag = ’ 1') then begin { flag is set } 

(Get the Paper Number Selected} 
dPaper_Number:= getsmallfield(’Paper_Number'); 
dReviewerID:= getsmallfield(’ReviewerlD’); 

(Get the Paper Record from the SUBMISSION Table} 
with Table 1 do begin 

{ Move to proper record } 

open; 

first; 

while fieldbyName(’Paper_Number').asstring <> dPaper_Number do 
next; 

(Retrieve record} 

dTitle:= fieldByName ('Title’). asstring; 

dbANumber:= fieldByName (’ContactAuthorNumber’).asstring; 

CGIDBl.memoToStringList (fieldbyname ('Abstract'), theabstract); 

dbcontactOrder:= fieldByName ('contactOrder'). asstring; 

dborder2;= fieldByName ('order2'). asstring; 
dbfname2:= fieldByName ('fname2'). asstring; 
dblname2:= fieldByName ('lname2'). asstring; 
dbinstitution2:= fieldByName (’institution2').asstring; 

dborder3:= fieldByName ('orderS’). asstring; 
dbfname3:= fieldByName ('fname3').asstring; 
dblname3:= fieldByName (’lname3’). asstring; 
dbinstitution3:= fieldByName ('institution3’). asstring; 

dborder4:= fieldByName ('order4').asstring; 
dbfname4:= fieldByName (’fname4’). asstring; 
dblname4:= fieldByName (’lname4’).asstring; 
dbinstitution4:= fieldByName (’institution4').asstring; 

dborder5:= fieldByName ('order5'). asstring; 
dbfname5:= fieldByName (’fname5’), asstring; 
dblname5:= fieldByName (’InameS’). asstring; 
dbinstitution5:= fieldByName (’institution5'). asstring; 

dborder6:= fieldByName ('order6’).asstring; 
dbfname6:= fieldByName ('fnameb’). asstring; 
dblname6:= fieldByName (’lname6').asstring; 
dbinstitution6:= fieldByName ('institutionb'). asstring; 
close; 
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end; 



{Get Author Name information from the AUTHOR Table) 

with Table2 do begin 

(Move to proper record} 

open; 

first; 

while fieldbyName('ANumber').asstring <> dbANumber do 
next; 

{ Retrieve Author Name information} 

dbFName := fieldByName(’FName’).AsString; 
dbLName := fieldByName(’LName').AsString; 
dblnstitution := fieldByName(’Institution').AsString; 

(Determine Order of Authors} 

theAuthors:= TStringList. create; 

(Send the Authors} 

send (’<B>Author(s): </BxBR>*); 

if dbContactOrder = '* then 

send (’ <!>’+ dbFName +' '+ dbLName ’+dbInstitution+’</I> ') 
else begin 

(Initialize the stringlist) 

for i:= 0 to 6 do 

theAuthors.add(’not used'); 

dbContactOrderInt:= strtoint(dbContactOrder); 

theAuthors[dbContactOrderInt]:= " +dbFName+ ' ' +dbLName+ ’+dbInstitution+” 

if dbOrder2 <> ” then begin 
dbOrder2Int:= strtoint(dbOrder2); 

theAuthors[dbOrder2Int]:= "+dbFName2+ ’ ’ +dbLName2+ '+dbInstitution2+"; 
end; 

if dbOrder3 <> " then begin 
dbOrder3Int:= strtoint(dbOrder3); 

theAuthors[dbOrder3Int]:= ”+dbFName3+ ’ ’ +dbLName3+ *, '+dbInstitution3+”; 
end; 

if dbOrder4 <> " then begin 
dbOrder4Int:= strtoint(dbOrder4); 

theAuthors[dbOrder4Int]:= ”+dbFName4+ ’ ’ +dbLName4+ '+dbInstitution4+"; 
end; 

if dbOrder5 <> " then begin 
dbOrder5Int:= strtoint(dbOrder5); 

theAuthors[dbOrder5Int]:= "+dbFName5+ ' ' +dbLName5+ '+dbInstitution5+"; 
end; 

if dbOrderb <> " then begin 
dbOrder6Int:= strtoint(dbOrder6); 
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lheAuthors[dbOrder6Int]:= "+dbFName6+ ‘ ' +dbLName6+ '+dbInstitution6+*' 
end; 

send ('<!>' +lheAulhors[l]+ '</IxBR>'); 
for i:= 2 to 6 do 

if theAuthors[i] <> 'not used’ then send ('<I>* +theAuthors[i]+ '</IxBR>’); 
end; {else} 
close; 

end; |withTable2} 

{Get the Review Information from the REVIEWS Table) 

with Tables do begin 

with Query 1 do begin 

close; 

sql.clear; 

sql.add(’SELECT * FROM Reviews'); 
sql.add('WHERE ReviewerlD = '"+dReviewerID+"' AND'); 
sql.add('Paper_Number = '"+dPaper_Number+"”); 
open; 

{ Move to proper record ) 
first; 

while fieldbyName('Paper_Number').asstring <> dPaper_Number do 
next; 

{ Retrieve record } 

dTitle:= fieldByName('Title’).asstring; 
dRNumber:= fieldByName(’RNumber').asstring; 
dVote:= fieldByName('Vote’).asstring; 

CGIDBl.memoToStringList (fieldbyname(’Review'), thereview); 

end; {with queryl) 

close; 

end; {with TableS) 

send ('<H3xB>Tille: </B> " ' + dTitle + ' " </H3>'); 
send C<B>Paper Number: </B> " ' + dPaper_Number +’"'); 

send C<PxB>Abstract: </BxP>'); 

for i := 0 to theabstract.count - 1 do 
send( theabstract.strings[i] ); 

theabstract.free; {release the memory held by 'theabstract' } 
sendhr; 

send C<P>You may view the extended summary for this submission by selecting'); 
send (’file '+dPaper_Number+' from the<A HREF="../uploads/"> following list<A 
HREF=”../uploads/"x/A>.<P>'); 

{Reviewer Input) 
sendhr; 

send C<IxB>Please edit your review for this particular article:</Bx/I>'); 
send (’<PxFORM METHOD="POST" ACTION="../cgi-win/addl33b.exe">'); 
send (’<INPUT TYPE="hidden" Name="flag" Value="l">'); 
send (’<INPUT TYPE="hidden" Name="Title” Value=’"+ dTitle +’">'); 
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send C<INPUT TYPE="hidden" Name="Paper_Number" Value="'+ dPaper_Number 

send C<INPUT TYPE="hidden" Name="RNumber" Value="'+ dRNumber 

send C<INPUT TYPE="hidden" Name="ReviewerID" Value="'+dReviewerID+'">'); 



send C<P><B>Original Vote: </B> " ' + dVote + ' " <P>'); 

send('<P><B>New Vote: </BxP>'); 

send C<INPUT TYPE=”radio" NAME=" Vote" VALUE="Strong Accept" > Strong Accept'); 

send C<INPUT TYPE="radio" NAME="Vote" VALUE="Conditional Accept" > Conditional Accept'); 

send C<INPUT TYPE="radio" NAME="Vote" VALUE=" Reject" > Reject'); 

send C<INPUT TYPE="radio" NAME="Vote" VALUE="Undecided" > Undecided'); 

send C<INPUT TYPE="radio" NAME="Vote" VALUE="Not Qualified" > Not Qualified'); 

send C<P><B>Original Review: </B> (Simply edit or leave as is.)<P><TEXTAREA NAME="review" 
COLS=85 Rows=5 wrap=virtual>'); 
for i := 0 to thereview. count - 1 do 
send( thereview.strings[i] ); 
send(’</TEXTAREA>’); 

thereview. free; {release the memory held by ’thereview’ ) 
send C<BR>'); 

send('<P><CENTER><INPUT TYPE="submit" Value="Submit Review 
Info"x/CENTER></FORM>'); 

sendhr; 

send('<P><FORM ACTION="../cgi-win/Editrev.exe" METHOD="POST">'); 
send('<INPUT TYPE="hidden" Name="flag" Value=" !">'); 

send('<INPUT TYPE="hidden" Name="ReviewerID" Value='"+dReviewerID+'">'); 
send('<P><CENTER><INPUT TYPE="submit" Value="Edit Another 
Review">c/CENTER></FORM>'); 

sendhr; 

send('<P><FORM ACTION="../cgi-win/Revpwd.exe" METHOD="POST">'); 
send('<INPUT TYPE="hidden" Name="flag" Value="l">’); 

send('<INPUT TYPE="hidden" Name="ReviewerID" Value="'+dReviewerID+'">'); 
send('<P><CENTER><INPUT TYPE="submit" Value="Return to the On-Line Article Review Options 
page"></CENTERx/FORM>'); 
send ('</BODYx/HTML>'); 
closeStdout; 

closeApp( application ); { don’t leave form around } 
end (flag is set) 

else begin { flag **incorrect** ) 

send C</HEADxBODY bgcolor=FFFFFF>'); 

send C<centerxH2>On-Line Article Review System</H2x/center>’); 
sendhr; 

send C<centerxH2>Your password was <strong>not accepted !!</strongx/H2x/center>’); 
send C<P>Please ensure that you are authorized to access this information.'); 

send C<P>If you made an error, then please <A HREF="../review/Review30.htm">try to login again.</A>'); 
send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
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send ('prosecution for your actions.<BR>’); 



send (’<P><hrxPxIMG SRC=”../review/asil2b0.gif ” align=left alt="Asilomar facility 

send (’Return to the <A HREF="htlp://XXX.XXX.XXX.XXX/review/Review30.htmr>On-line Article 

Review Pagec/A>'); 

send (’</BODY>o^TML>’); 

closeStdout; 

closeApp( application ); 



end; {flag **incorrect**} 
end; (with CGIEnvDatal) 
end; {>^ith FormCreate} 
end. 
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The edit a review confirmation page: Addl33b.exe 



unit D133addb; 

{WHEN CALLED; This program adds article review data to the Reviews database. 
INPUT: Review data from the Revview2 page. 

ACTION: places Review data into the Reviews Table.} 
interface 
uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 

Forms, Dialogs, Cgidb, Cgi, DBTables, DB; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB TTCGIDB; 

Table 1: TTable; 

DataSourcel: TDataSource; 



procedure FormCreate(Sender: TObject); 
private 

{ Private declarations ) 
public 

{ Public declarations } 
end; 

var 

Forml: TForml; 
thereview : TStringList; 
dRNumber: string; 
dRNumberint: integer; 
dReviewerlD: string; 
dVote: string; 
dbTitle: string; 
dPaper_Number: string; 
dbAbstract: string; 
dYear: string; 
dflag: string; 



implementation 

{$R*.DFM} 



procedure TForm 1 .FormCreate(Sender: TObject); 
begin 



with CGIEnvDatal do begin 
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{Standard Header} 
webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 

createStdout; 

sendPrologue; 

( Determine whether flag is valid } 

dflag:= getsmallfield ('flag'); 

if (dflag = T) then begin { flag is set } 

{Get data from FORM} 

dReviewerID:= getsmallfield ('ReviewerlD'); 
dVote:= getsmallfield ('Vote'); 
dbTitle:= getsmallfield ('Title'); 
dPaper_Number:= getsmallfield ('Paper_Number'); 
dRNumber:= getsmallfield ('RNumber'); 
dYear := DateToStr(Now); 

thereview := TStringList.create; 

CGIEnvDatal .getTextArea('review', thereview); 

{Place Data into Reviews Table} 
with Table 1 do begin 

{Move to proper record} 

open; 

first; 

while fieldbyName('RNumber').asstring <> dRNumber do 
next; 

{Update record } 
edit; 

SetFields([nil dReviewerlD, dPaper_Number, dbTitle, dVote, nil, dYear]); 
edit; 

CGIDB 1 .StrmglistToMemo(thereview, fieldbyname('Review')); 
thereview. free; 

post; 

close; 

end; {with Tablel } 



{Send the Thank you Paper page with the link to the On-Line Article Review Page} 
send C<HTML><HEAD>'); 

SendTitle(’On-Linc Article Review System’); 

send ('</HEADxBODY bgcolor=FFFFFF>'); 
send C<center><Hl>Edit a Review</Hlx/center>'); 



sendhr; 
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send C<CENTER><P>Thank you for your input, <B> '+ dReviewerlD 

send (Tour information has been added to the article review database.</Px/CENTER>'); 

sendhr; 

send('<P><FORM ACTION="../cgi-win/Editrev.exe" METHOD="POST">'); 
send('<INPUT TYPE="hidden” Name="flag'‘ Value='T’>'); 
send('<INPUT TYPE="hidden" Name="ReviewerID" Value='"+ dReviewerlD 
send('<P><CENTER><INPUT TYPE="submit" Value="Query another 
Article"></CENTERx/FORM>'); 

sendhr; 

send('<PxFORM ACTION="../cgi-win/Revpwd.exe" METHOD="POST">'); 
send(’<INPUT TYPE="hidden" Name="flag" Value=’T'>'); 
send(’<INPUT TYPE="hidden" Name="ReviewerID" Value="'+ dReviewerlD 

send('<PxCENTERxINPUT TYPE="submit" Value="Return to the On-Line Article Review Options 
Page"x/CENTERx/FORM>'); 

send ('<PxhrxPxIMG SRC="../review/asil2b0.gif " align=left alt="Asilomar facility">'); 
send ('</BODYx/HTML>’); 

closeStdout; 

closeApp( application ); { don’t leave form around } 

end {flag is set) 

else begin { flag **incorrect** ) 

send C<centerxH2>On-line Article Review Systemc/H2></center>’); 
sendhr; 

send C<centerxH2> Your password was <strong>not accepted! !</strongx/H2x/center>’); 
send C<P>Please ensure that you are authorized to access this information,'); 
send C<P>If you made an error, then please <A HREF="../review/Review30.htm">try to login 
again. </A>’); 

send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
send ('prosecution for your actions.<BR>'); 

send ('<PxhrxPxIMG SRC="../review/asil2b0.gif " align=left alt="Asilomar facility">'); 

send ('Return to the <A HREF="../review/Review30.htm">On-line Article Review Log-on Page</A>'); 

send C<BR>'); 

send ('</BODYx/HTML>'); 

closeStdout; 

closeApp( application ); 

end; (flag **incorrect**} 

end; { with CGIEnvDatal ) 

end; (FormCreate) 

end. 
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I. 



.rf?. 





! 
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APPENDIX D. MASTER REVIEW SUB-SYSTEM CODE 



This appendix contains the HTML and Delphi code for the HTML documents and 
Delphi executables that comprise the Master Review Sub-system. The relationships of 
the programs are depicted in Figure D- 1 . 



Master Review System 




Figure D - 1 . 
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The Master Review System log-on page: Masterev.htm 

<HTML> 

<HEAD> 

<TITLE>Master Review System</TITLE> 

</HEAD> 

<BODY bgcolor=FFFFFF> 

<centerxHl>Master Review System</centerx/Hl> 

<P> This page is intended for the exclusive use by the Master Reviewer for 
the Asilomar Conference on Signals, Systems, & Computers. 

<FORM ACTION="../cgi-win/Mastpwd.exe " METHOD="POST"> 

<HRxCENTER> 

<B>Master ID: </BxINPUT NAME=”masterid” Size=”20” TYPE="text”> 

<B>Password: </BxINPUT NAME=*’pwd” Size="20" TYPE="password”> 

<PxINPUT TYPE=*’submit” Value=’’Submit Password"> <INPUT TYPE="reset’” 

VALUE=”Clear Values"x/CENTER> 

<PxhrxP> 

<IMG SRC=”asil2b0.gif ” align=left alt=”Asilomar facility"> 

Go to the <A 

HREF='’http://XXX.XXX.XXX.XXX/submit/Index.htm”>On-line Submission Page</AxBR> 

Go to the <A 

HREF="http://XXX.XXX.XXX.XXX/review/review30.htm”>On-line Article Review Page</AxBR> 
</BODY> 

</HTML> 
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The Master Review System Main Menu page: Mastpwd.exe 



unit Mast_pwd; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, Cgidb, Cgi, DBTables, DB; 

type 

TForml = class(TForm) 

Query 1: TQuery; 

DataSourcel: TDataSource; 

Table 1: TTable; 

CGIEnvDatal: TCGIEnvData; 

CGIDB LTCGIDB; 

Query 1 Password: TStringField; 

Table 1 Number: TIntegerField; 

Table IMasterlD: TStringField; 

TablelPassword: TStringField; 
procedure FormCreate(Sender: TObject); 
private 

{ Private declarations ) 
public 

{ Public declarations ) 
end; 

var 

Forml: TForml; 

dMasterlD: string; 
dPassword: string; 
dpwd: string; 
dflag: string; 

implementation 

{$R *.DFM} 

procedure TForm 1 .F‘ormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINlFilcnamc:=paramstr(l); 
application. onF\ccptu)n:=cgiErrorHandler; 
application. proccssMessages; 

createStdout; 

sendPrologue; 

{Get fields from search page} 
dMasterID:= getsmallfield (’MasterlD’); 
dpwd:= getsmallfield ( pwd'); 
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dflag:= getsmallfield ('flag'); 



send C<HTML><HEAD>'); 

SendTitle('Master Review System'); ( Every page gets this } 

send ('c/HEADxBODY bgcolor=FFFFFF>'); 

end; 

( Retrieve Password of the given User} 
with Query 1 do begin 

close; 
sql. clear; 

sql.add('Select*FROM Master WHERE MasterlD = "' + dMasterlD + ""); 
open ; 

Table 1. Open; 

Table 1. First; 

dPassword := fieldByName('Password').Asstring; 

Table 1. Close; 
end; 



with cgiEnvDatal do begin 

(Determine whether password was correct) 

if (dPassword = dpwd) or (dflag = T) then begin (password was correct or flag is set) 

send('<center><Hl>Master Review System</Hlx/center>'); 
sendhr; 

send('<center><h3>Master Review Functions</h3></center>’); 

(Summary of Reviews Button) 

send('<P><FORM ACTION="../cgi-win/Revsum.exe" METHOD="POST">'); 
send(’<INPUT NAME=”flag" TYPE="hidden" Value=’T">'); 

send('<P><center><INPUT TYPE="submit" Value="Summary of Reviews"x/center></FORM>'); 

(Accept/Reject Articles Button) 

send('<P><FORM ACTION="../cgi-win/Acceprej.exe" METHOD="POST">’); 
send('<INPUT NAME="flag" TYPE="hidden" Value=" !">'); 

send('<P><center><INPUT TYPE="submit" Value=" Accept/Reject Articles"></centerx/FORM>'); 

(Overall Submission Status Button) 

send('<PxFORM ACTION="../cgi-win/Overstat.exe" METHOD="POST">'); 
send('<INPUT NAME="flag" TYPE="hidden" Value=" !’'>'); 
send('<P><center><INPUT TYPE="submit" Value=" Overall Submission 
Status"></centerx/FORM>'); 

end 

else begin (Password **incorrect**} 

send('<center><Hl>Master Review System</Hlx/center>'); 
sendhr; 

send('<centerxH2>Your password was <strong>not accepted !!</strong></H2x/center>’); 
send (’<P>Please ensure that you are authorized to access this information.'); 
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send (’<P>If you made an error, then please <A HREF="../review/masterev.htm”>try to login 
again.</A>’); 

send C<P>If you are not authorized to access this information, please note that a log is’); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal ’); 
send (’prosecution for your actions. <BR>’); 

end; {flag incorrect} 

send C<P><hr><P><IMG SRC=”../review/asil2b0.gif ” align=left alt=”Asilomar facility’’>'); 
send (’Go to the <A HREF=”../review/Review30.htm">On-Line Article Review Page</A>'); 
send (’</BODY></HTML>’); 
closeStdout; 
closeApp( application ); 

end; (with CGIEnvDatal do) 
end; {FormCreate} 
end. 
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The Summary of Reviews search options page: Revsum.i 



unit Rev_sum; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB 1: TCGIDB; 

DataSourcel: TDataSource; 

Query 1: TQuery; 

Table liTTable; 

Table2: TTable; 

Table3: TTable; 

Table2Paper_Number: TIntegerField; 

Table2Title: TStringField; 

Table2Invited: TStringField; 

Table2Accepted: TStringField; 

Table2ContactAuthorNumber: TIntegerField; 

TabIe2Session: TStringField; 

Table20rderInSession: TIntegerField; 

Table2PresentationTime: TStringField; 

Table2Keywordl : TStringField; 

Table2Keyword2: TStringField; 

Table2Keyword3: TStringField; 

Table2Abstract: TMemoField; 

Table2ContactOrder: TStringField; 

Table2FName2: TStringField; 

Table2LName2: TStringField; 

Table2Initial2: TStringField; 

Table2Institution2: TStringField; 

Table20rder2: TStringField; 

Table2FName3: TStringField; 

Table2LName3: TStringField; 

Table2Initial3: TStringField; 

Table2Institution3: TStringField; 

Table20rder3: TStringField; 

Table2FName4: TStringField; 

Table2LName4: TStringField; 

Table2Initial4: TStringField; 

Table2Institution4: TStringField; 

Table20rder4: TStringField; 

Table2FName5: TStringField; 

Table2LName5: TStringField; 

Table2Initial5: TStringField; 

Table2Institution5: TStringField; 

Table20rder5: TStringField; 

Table2FName6: TStringField; 
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Table2LName6: TStringField; 
Table2Initial6: TStringField; 
Table2Institution6: TStringField; 
Table20rder6: TStringField; 

Table IRNumber: TIntegerField; 

Table IReviewerlD: TStringField; 
TablelPaper_Number: TStringField; 
TablelTitle: TStringField; 

Table 1 Vote: TStringField; 

Table 1 Review: TMemoField; 

Table 1 Year: TStringField; 

Query 1 Name: TStringField; 

Query 1 Number: TIntegerField; 
TableSNumber: TIntegerField; 
Table3Name: TStringField; 

DataSource2: TDataSource; 

Query2: TQuery; 

CGIDB2: TCGIDB; 

Table4: TTable; 

Query 2ReviewerID: TStringField; 

Query 2Number: TIntegerField; 
procedure FormCreate(Sender: TObject); 

private 

{ Private declarations ) 
public 

{ Public declarations ) 
end; 

var 

Forml: TForml; 
dflag: string; 
dReviewerlD: string; 
dbOption: string; 

i: integer; {loop control variable) 



implementation 
($R *.DFM) 

procedure TForm 1 .FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 

createStdout; 

sendPrologue; 

send C<HTML><HEAD>'); 

SendTitle('Master Review System'); 



send ('c/HEADxBODY bgcolor=FFFFFP>’); 



{ Determine whether flag is valid ) 

dflag:= getsmallfield ('flag'); 

if (dflag = T) then begin {flag is set) 

send('<center><H 1 >Summary of Reviews</H 1 ></center>'); 
sendhr; 

send('<p>A summary of reviews in the database can be viewed for either all of the articles, '); 
send('or for reviews grouped by keyword. Please select your reviewing option below.</p>'); 

(Display ALL Article Reviews } 

send('<PxFORM ACTION="../cgi-win/RevSrch.exe" METHOD="POST">'); 
send('<INPUT TYPE=”hidden" Name="flag" Value=" !">'); 
send('<INPUT TYPE=”hidden” Name="Type" Value="air>'); 

sendhr; 

sendhdr ('3', 'Choose from a list of ALL Reviewed Articles?'); 
send('<PxCENTERxINPUTTYPE="submit" Value="Show me a list of ALL 
Reviews"x/CENTERx/FORM>’); 

{ Search by Keyword } 

send('<PxFORM METHOD="POST" ACTION="../cgi-win/RevSrch.exe">'); 

send('<INPUT TYPE="hidden" Name="flag" Value=" !">'); {send flag for verification) 

send('<INPUT TYPE="hidden" Name="Type" Value="keyword">'); 

sendhr; 

sendhdr ('3', 'Choose from a list of Reviewed Articles with these characteristics?'); 

{Pull Keywords from KEYWORD Table and display on pull-down menu) 

with Query 1 do begin 

close; 
sql. clear; 

sql.add('Select * FROM Keyword '); 
open; 

{Move records from query result to stringlist) 

Table3.open; 

Table3. first; 

send('<PxCENTERxB>Keyword: </BxSELECT NAME="Keyword">'); 
send('<OPTION> Do not search on this field’); 

while not Table3.EOF do begin 

dbOption:= Table3.fieldByName('Name').Asstring; 
send('<OPTION> ' +dbOption+ "); 

Table3.next; 

end; {for all records in the query result) 



send('</SELECTx/CENTER>') ; 
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end; {withQueryl} 



send('<P><CENTER><INPUT TYPE="submit” Value="Show me a list of Reviews like this"> '); 
send(’<INPUT TYPE=”reset” VALUE="Reset Article Fields”></CENTERx/form>’); 



(Search by ReviewerlD} 

send('<P><FORM METHOD="POST” ACTION="../cgi-win/RevSrch.exe">’); 

send(’<INPUT TYPE='’hidden” Name="flag" Value=" 1 { send flag for verification } 

send(’<INPUT TYPE=”hidden” Name=”Type” Value=”reviewer">‘); 

sendhr; 

sendhdr ('3', 'Choose from a list of Reviewers?'); 



(Pull ReviewerlD's from Review Table and display on pull-down menu} 
with Query2 do begin 

close; 
sql. clear; 

sql.add('Select * FROM Review'); 
open; 

(Move records from query result to stringlist} 

Table4.open; 

Table4.first; 

send('<P><CENTER><B>ReviewerID: </BxSELECT NAME="ReviewerID">'); 
send(’<OPTION> Do not search on this field'); 

while not Table4.EOF do begin 

dbOption:= Table4.fieldByName('ReviewerID’).Asstring; 
send('<OPTION> ' +dbOption+ "); 

Table4.next; 

end; (for all records in the query result} 
send(’</SELECTx/CENTER>'); 
end; {withQuery2} 

send('<PxCENTERxINPUT TYPE="submit" Value="Show me a list of Reviews by this Reviewer"> '); 
send('<INPUT TYPE="reset" VALUE="Reset Article Field"x/CENTERx/form>'); 



sendhr; 

send(’<PxFORM ACTION="../cgi-win/Mastpwd.exe" METHOD="POST">'); 
send(’<INPUT TYPE=''hidden” Name="flag" Value="l">'); 

send(’<P><CENTERx INPUT TYPE=" submit" Value="Return to Master Review System Options 
Page"x/CENTERx/FORM>’); 

send C</BODYx/HTML>'); 
closeStdout; 
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closeApp( application ); 
end {flag is set) 

else begin {flag **incorrect**} 

send C<cenler><H2>Master Review System</H2>c/center>’); 
sendhr; 

send (’<centerxH2>Your password was <strong>nol accepted! !</strong></H2>c/center>’); 
send (’<P>Please ensure that you are authorized to access this information.'); 

send C<P>If you made an error, then please <A HREF=''../review/admin20.hlm”>try to login again. </A>’); 
send (*<P>If you are not authorized to access this information, please note that a log is’); 
send (’maintained that includes your URL. You may be subject to civil and/or criminal ’); 
send ('prosecution for your actions.<BR>’); 

send (’<P><hr><PxIMG SRC="../review/asil2b0.gif " align=left alt="Asilomar facility ”>’); 
send (’Return to the <A HREF=”,./review/masterev.htm”>Master Review Log-on Page</A>’); 
send (’<BR>’); 

send ('</BODYx/HTML>’); 

closeStdout; 

closeApp( application ); 

end; {flag **incorrect**} 

end; {with cgiEnvDatal do) 

end; {FormCreate} 

end. 
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The Summary of Reviews search results page; Revsrch.exe 



unit Re_srch2; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DB, DBTables, Cgidb, Cgi; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB 1: TCGIDB; 

DataSourcel: TDataSource; 

Tablel: TTable; 

Query 1: TQuery; 

Table2: TTable; 

DataSource2: TDataSource; 

Table2RNumber: TIntegerField; 

Table2ReviewerID: TStringField; 

Table2Paper_Number; TStringField; 

Table2Title: TStringField; 

Table2Vote: TStringField; 

Table2Review: TMemoField; 

CGIDB2: TCGIDB; 

Query2: TQuery; 

Query3: TQuery; 

Query4: TQuery; 

Query 5: TQuery ; 

Query 6: TQuery ; 

Query?: TQuery; 

TableS: TTable; 

Table4: TTable; 

Table5; TTable; 

Table6: TTable; 

Table?: TTable; 

DataSource3: TDataSource; 

DataSource4: TDataSource; 

DataSource5: TDataSource; 

DataSourceb: TDataSource; 

DataSource?: TDataSource; 

CGIDB3: TCGIDB; 

CGIDB4: TCGIDB; 

CGIDB5; TCGIDB; 

CGIDB6: TCGIDB; 

CGIDB?: TCGIDB; 

CGIDB8: TCGIDB; 

QueryS: TQuery; 

DataSourceS: TDataSource; 

TableS: TTable; 

Table9: TTable; 

procedure FormCreate(Sender: TObject); 



private 
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{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Forml: TForml; 
dflag: string; 
dbOption: string; 

i, count, countl, count2, count3, count4, count5, count6 integer; 

temp:string; 

countstr: string; 

countstrl: string; 

countstr2: string; 

countstr3: string; 

countstr4: string; 

countstrS: string; 

countstrb: string; 

theAuthors : TStringList; 
theabstract : TStringList; 
dbContactOrderInt; integer; 
dbOrder2int: integer; 
dbOrder3int: integer; 
dbOrder4int: integer; 
dbOrder5int: integer; 
dbOrderbint: integer; 

dbANumber: string; 
dbcontactOrder: string; 

dbfname2: string; 
dblname2: string; 
dbinitial2: string; 
dbinstitution2: string; 
dborder2; string; 

dbfname3: string; 
dblname3: string; 
dbinitial3: string; 
dbinstitution3: string; 
dborder3: string; 

dbfname4: string; 
dblname4: string; 
dbinitial4: string; 
dbinstitution4: string; 
dborder4: string; 

dbfnameS: string; 
dblnameS: string; 
dbinitiaI5: string; 
dbinstitution5: string; 
dborder5: string; 



{loop control variable} 
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dbfname6: string; 
dblname6: string; 
dbinitialb: string; 
dbinstitutionb: string; 
dborderb: string; 

dbFName : string; 
dbLName : string; 
dbHonorific : string; 
dblnitial: string; 
dblnstitution : string; 

dReviewerlD: string; 
dVote: string; 
dRNuniber: string; 

dPaper_Number: string; 
dTitle: string; 

dReview: string; 
dtype: string; 

dkeyword: string; 

My Selector: integer; 

TC: TDataSet; 

implementation 

{$R*.DFM} 

procedure TForm 1 .FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 

creates tdout; 
sendPrologue; 

send C<HTML><HEAD>’); 

SendTitle('Master Review System’); 

send (’</HEADxBODY bgcolor=FFFFFF>’); 

{Determine whether flag is valid} 

dflag:= getsmallfield (‘flag’); 
dPaper_Number:= getsmallfield ('Paper_Number’); 

if (dflag = T) then begin (flag is set} 

send(’<centerxHl>M aster Review System</Hlx/center>'); 
sendhr; 
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{ Check the database for the author First and Last name) 



with QueryS do 
begin 
close; 
sql. clear; 

sql.add('Select*FROM Reviews WHERE Paper_Number="'+dPaper_Number+""); 
open; 

{Get the Paper Record from the SUBMISSION Table) 

with Tables do begin 

(Move to proper record) 

open; 

first; 

while fieldbyName('Paper_Number').asstring <> dPaper_Number do 
next; 

(Retrieve record) 

dTitle:= fieldByName (Title'). asstring; 

dbANumber:= fieldByName ('Con tact AuthorNumber'). asstring; 

CGIDBS.memoToStringList (fieldbyname ('Abstract'), theabstract); 

dbcontactOrder:= fieldByName ('contactOrder'). asstring; 

dborder2:= fieldByName ('order2'). asstring; 
dbfname2:= fieldByName ('fname2'). asstring; 
dblname2;= fieldByName ('lname2'). asstring; 
dbinstitution2:= fieldByName ('institution2'). asstring; 

dborder3:= fieldByName ('order3').asstring; 
dbfname3:= fieldByName ('fname3'). asstring; 
dblname3:= fieldByName ('lname3'). asstring; 
dbinstitution3:= fieldByName ('institution3'). asstring; 

dborder4:= fieldByName ('order4'). asstring; 
dbfname4:= fieldByName ('fname4'). asstring; 
dblname4:= fieldByName ('lname4').asstring; 
dbinstitution4:= fieldByName ('institution4').asstring; 

dborder5:= fieldByName ('order5'). asstring; 
dbfname5:= fieldByName ('fname5'). asstring; 
dblname5:= fieldByName ('lname5').asstring; 
dbinstitution5:= fieldByName ('institution5'). asstring; 

dborder6:= fieldByName ('orderb'). asstring; 
dbfname6:= fieldByName ('fname6').asstring; 
dblname6:= fieldByName ('Inameb'). asstring; 
dbinstitution6:= fieldByName ('institutionb'). asstring; 
close; 

end; (withTableS) 

(Get Author Name information from the AUTHOR Table) 
with Table9 do begin 
(Move to proper record) 

open; 
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first; 

while fieldbyName('ANumber').asstring <> dbANumber do 
next; 

{ Retrieve Author Name information} 

dbFName := fieldByNameCFName’).AsString; 
dbLName := fieldByName('LName').AsString; 
dblnstitution := fieldByName('Institution’).AsString; 

(Determine Order of Authors} 
theAuthors:= TStringList.create; 

(Send the Authors} 

send C<B>Author(s): </BxBR>’); 

if dbContactOrder = ” then 

send (' <!>’+ dbFName +' '+ dbLName +\ ’+dbInstitution+’</I> ’) 
else begin 

(Initialize the stringlist} 

for i:= 0 to 6 do 

theAuthors.add('not used’); 

dbContactOrderInt:= strtoint(dbContactOrder); 

theAuthors[dbContactOrderInt]:= " +dbFName+ ' ’ +dbLName+ ’+dbInstitution+” 

if dbOrder2 <> ” then begin 
dbOrder2Int:= strtoint(dbOrder2); 

theAuthors[dbOrder2Int]:= ”+dbFName2+ ’ ' +dbLName2+ ’+dbInstitution2+”; 
end; 

if dbOrderS <> " then begin 
dbOrder3Int:= strtoint(dbOrder3); 

theAuthors[dbOrder3Int]:= "+dbFName3+ ' ' +dbLName3+ ’+dbInstitution3+”; 
end; 

if dbOrder4 <> " then begin 
dbOrder4Int:= strtoint(dbOrder4); 

theAuthors[dbOrder4Int]:= ”+dbFName4+ ' ' +dbLName4+ ’+dbInstitution4+”; 
end; 

if dbOrderS <> ” then begin 
dbOrder5Int:= strtoint(dbOrder5); 

theAuthors[dbOrder5Int]:= ”+dbFName5+ ’ ' +dbLName5+ ’+dbInstitution5+"; 
end; 

if dbOrderb <> ” then begin 
dbOrder6Int:= strtoint(dbOrder6); 

theAuthors[dbOrder6Int]:= ”+dbFName6+ ' ' +dbLName6+ ’+dbInstitution6+"; 
end; 

send ('<!>’ +theAuthors[l]+ '</IxBR>’); 
for i:= 2 to 6 do 

if theAuthors[i] <> ’not used' then send (’<!>’ +theAuthors[i]+ ’</IxBR>'); 
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end; (else) 



close; 

end; ( with Table9 } 



send C<INPUT TYPE=”hidden” Name=”flag'’ Value='T’>'); 

send C<H3><B>Title: </B> " ' + dTitle + ' " </H3>'); 

send (’<B>Paper Number: </B> " ' + dPaper_Number + ' ” ’); 

send (’<P><B>Abstract: </BxP>'); 

for i := 0 to theabstract. count > 1 do 

send( theabstract.strings[i] ); 

theabstract.free; (release the memory held by ’theabstract'} 

send (’<P>You may view the extended summary for this submission by selecting’); 
send (’file ’+dPaper_Number+’ from the<A HREF="../uploads/”> following list<A 
HREF=”../uploads/”x/A>.<P>’); 
sendhr; 

end; (with QueryS} 

with Query 1 do begin 

close; 
sql. clear; 

sql.add(’Select * FROM Reviews WHERE Paper_Number='”+dPaper_Number+"”); 
open; 

count:= Recordcount; 

countstr:= inttostr (count); 

dTitle:= fieldbyname('Title').asstring; 

send(’<Pxcenter>There are ’ +countstr+ ' reviews for this paper in the database.<P>’); 

CGIDBi.drawtable; (display all titles) 

send C</center>’); 

send C<BR>’); 

end; (withQueryl) 

send(’ ’); 

sendhr; 

with Query! do begin 

close; 
sql. clear; 

sql.add(’Select * FROM Reviews'); 

sql.add('Where Paper_Number = '"+dPaper_Number+”"); 

open; 

count 1 := Recordcount; 
countstrl:= inttostr(countl); 
close; 

end ; ( with Query 2 } 

with Query3 do begin 

close; 
sql. clear; 

sql. add ('Select * FROM Reviews’); 
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sql.add ('Where ((Paper_Number = "'+dPaper_Number-f'")AND(Vote="Strong Accept"))'); 
open; 

count2:= Recordcount; 
countstr2:= inttostr(count2); 
close; 

end; {withQuery3} 

with Query4 do begin 

close; 
sql. clear; 

sql.add ('Select * FROM Reviews'); 

sql.add ('Where ((Paper__Number = '"+dPaper_Number'f'")AND(Vote="Conditional Accept"))'); 
open; 

counts := Recordcount; 
countstr3:= inttostr(countS); 
close; 

end; (withQuery4} 

with QueryS do begin 

close; 
sql. clear; 

sql.add ('Select * FROM Reviews'); 

sql.add ('Where ((Paper_Number = '"+dPaper_Number+"’)AND(Vote="Reject"))'); 
open; 

count4:= Recordcount; 
countstr4:= inttostr(count4); 
close; 

end; {withQueryS} 

with Query6 do begin 

close; 
sql. clear; 

sql.add ('Select * FROM Reviews'); 

sql.add ('Where ((Paper_Number = '"+dPaper_Number+'")AND(Vote="Undecided"))'); 
open; 

counts := Recordcount; 
countstr5:= inttostr(countS); 
close; 

end; {withQuery6} 

with Query? do begin 

close; 
sql. clear; 

sql.add ('Select * FROM Reviews'); 

sql.add ('Where ((Paper_Number = '"+dPaper_Number-f'")AND(Vote="Not Qualified"))'); 
open; 

count6:= Recordcount; 
countstr6:= inttostr(count6); 
close; 

end; {with Query?} 
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send('<CENTER><B><H2>Vote Summary</H2></B>’); 
sendC '); 

{Build list of Votes} 

send('<TABLE BORDER>'); 

send(*<TR><TH># Votes</THxTH> Strong Accept</THxTH>Condilional Accept</TH>'); 

send('<TH>Reject</THxTH>Undecided</THxTH>Not Qualified</THx/TR>'); 

send('<TRxTD>'+countstrl+'</TD>'); 

send('<TD>'+countstr2+'</TD>'); 

send('<TD>'+countstr3+'</TD>’); 

send('<TD>'+countstr4+’</TD>'); 

send('<TD>'+countstr5+'</TD>'); 

send('<TD>'+countstr6+'c/TDx/TR>'); 

send('</TABLEx/CENTER>’); 

send('<BR>’); 



send C<CENTERxBxI>Please cast your vote for this particular article:</I>'); 
send(’<PxFORM METHOD="POST” ACtlON="../cgi-win/MastAcep.exe” >'); 
send(’<INPUT TYPE="hidden" Name="flag" Value="l">'); 
send (’<INPUT TYPE=”hidden" Name='TitIe’' Value=”'+ dTitle 
send (’<INPUT TYPE="hidden” Name="Paper_Number" Value='"+ dPaper_Number 
send ('<INPUT TYPE="radio" NAME=”Vote" VALUE="Accept" > Accept’); 
send (’<INPUT TYPE="radio" NAME="Vote" VALUE=" Reject” > Reject</B>'); 
sendC '); 

send('<PxINPUT TYPE=”submit” Value=”Submit Review Info”x/CENTERx/FORM>'); 

(HTML Footer) 
sendhr; 

send('<PxFORM ACTION=”../cgi-win/Revsum.exe'' METHOD=”POST">'); 
send(’<INPUT TYPE="hidden” Name=”flag” Value=”l”>'); 
send('<PxCENTERxINPUTTYPE="submit” Value=”View another 
summary '’x/CENTERx/FORM>'); 

sendhr; 

send(’<PxFORM ACTION=”../cgi>win/Mastpwd.exe” METHOD=”POST”>’); 
send(’<INPUT TYPE=”hidden” Name=”flag” Value=” !”>’); 

send(’<PxCENTERxINPUT TYPE=”submit'' Value=”Return to the Master Review Options 
Page"x/CENTERx/FORM>'); 
send (’</BODYx/HTML>’); 
closeStdout; 
cIoseApp( application ); 

end (flag is set) 

else begin (flag **incorrect**) 

send('<centerxHl>Master Review System</Hlx/center>'); 
sendhr; 

send('<centerxH2>Your password was <strong>not accepted !!</strongx/H2x/center>’); 
send C<P>Please ensure that you are authorized to access this information.'); 
send (’<P>If you made an error, then please <A HREF=".. /review/re view30.htm”>try to login 
again. </A>’); 

send C<P>If you are not authorized to access this information, please note that a log is’); 
send (’maintained that includes your URL. You may be subject to civil and/or criminal '); 
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send ('prosecution for your actions. <BR>'); 

send C<P><hr><P><IMG SRC="../review/asil2b0.gif ” align=left alt="Asilomar facility">’); 
send (‘Return to the <A HREF='‘../review/masterev.htm">Master Review Log-on Page</A>‘); 
send C</BODY></HTML>'); 
closeStdout; 
closeApp( application ); 

end; ( flag **incorrect** } 

end; { with cgiEnvDatal do } 

end; (FormCreate) 

end. 
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The Edit a Review page: Revsrch2.exe 



unit Re_srch2; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DB, DBTables, Cgidb, Cgi; 

type 

TForm 1 = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDBI:TCGIDB; 

DataSourcel: TDataSource; 

Tablet: TTable; 

Query 1: TQuery; 

Table2: TTable; 

DataSource2: TDataSource; 

Table2RNumber: TIntegerField; 

Table2ReviewerID: TStringField; 

Table2Paper_Number: TStringField; 

Table2Title: TStringField; 

Table2Vote: TStringField; 

Table2Review: TMemoField; 

CGIDB 2: TCGIDB; 

Query2: TQuery; 

QueryS: TQuery; 

Query4: TQuery; 

QueryS: TQuery; 

Query6: TQuery; 

Query?: TQuery; 

Table3: TTable; 

Table4: TTable; 

Tables: TTable; 

Table6: TTable; 

Table?: TTable; 

DataSourceS: TDataSource; 

DataSource4: TDataSource; 

DataSourceS: TDataSource; 

DataSourceb: TDataSource; 

DataSource?: TDataSource; 

CGIDB 3: TCGIDB; 

CGIDB4: TCGIDB; 

CGIDBS: TCGIDB; 

CGIDB6: TCGIDB; 

CGIDB?: TCGIDB, 

CGIDBS: TCGIDB; 

QueryS: TQuery; 

DataSourceS: TDataSource; 

Tables: TTable; 

Table9: TTable; 

procedure FormCreate(Sender: TObject); 



private 
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{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Forml : TForml ; 
dflag: string; 
dbOption: string; 

i, count, countl, count2, count3, count4, counts, count6 .integer; 

lempistring; 

countstr: string; 

countstrl: string; 

countstr2: string; 

countstr3: string; 

countstr4: string; 

countstrS: siring; 

countstrb: string; 

theAuthors : TStringList; 
theabstract : TStringList; 
dbContactOrderInt: integer; 
dbOrder2int: integer; 
dbOrder3int: integer; 
dbOrder4int: integer; 
dbOrderSint: integer; 
dbOrderbint: integer; 

dbANumber: string; 
dbcontactOrder: siring; 

dbfname2: string; 
dblname2: siring; 
dbinitial2: string; 
dbinstitution2: siring; 
dborder2: siring; 

dbfname3: siring; 
dblname3: string; 
dbinilial3: string; 
dbinstituiion3: siring; 
dborder3: string; 

dbfname4: string, 
dblname4: string. 
dbinitial4: string, 
dbinstitulion4: string; 
dborder4: siring; 

dbfnameS: string; 
dblnameS: string; 
dbinitialS: string; 
dbinstitulion5: string; 
d borders : string; 



{ loop control variable ) 



147 



dbfname6; string; 
dblname6: string; 
dbinitialb: string; 
dbinstitutionb: string; 
dborderb: string; 

dbFName : string; 
dbLName : string; 
dbHonorific : string; 
dblnitial: string; 
dblnstitution : string; 

dReviewerlD: string; 
dVote: string; 
dRNumber: string; 

dPaper_Number: string; 
dTitle: string; 

dReview: string; 
dtype: string; 

dkeyword: string; 

MySelector: integer; 

TC: TDataSet; 

implementation 

($R *.DFM} 

procedure TForml.FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 

createStdout; 

sendPrologue; 

send C<HTMLxHEAD>’); 

SendTitle('Master Review System'); 

send C</HEAD><BODY bgcolor=FFFFFF>'); 

{ Determine whether flag is valid} 

dflag:= getsmallfield ('flag'); 
dPaper_Number:= getsmallfield ('Paper_Number'); 

if (dflag = '!’) then begin {flag is set} 

send(’<centerxHl>M aster Review System</Hlx/center>'); 
sendhr; 
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{Check the database for the author First and Last name} 



with Query 8 do 
begin 
close; 
sql.clear; 

sql.add(’Select * FROM Reviews WHERE Paper_Number='”+dPaper_Number+""); 
open; 

{Get the Paper Record from the SUBMISSION Table) 
with Tables do begin 

{Move to proper record) 

open; 

first; 

while fieldbyName(’Paper_Number').asstring <> dPaper_Number do 
next; 

{Retrieve record) 

dTitle:= fieldByName (Title').asstring; 

dbANumber:= fieldByName (’ContactAuthorNumber').asstring; 

CGIDBS.memoToStringList (fieldbyname ('Abstract'), theabstract); 

dbcontactOrder:= fieldByName ('contactOrder').asstring; 

dborder2:= fieldByName ('order2').asstring; 
dbfname2:= fieldByName ('fname2').asstring; 
dblname2:= fieldByName ('lname2').asstring; 
dbinstitution2:= fieldByName ('institution2').asstring; 

dborder3:= fieldByName ('order3').asstring; 
dbfname3:= fieldByName ('fname3').asstring; 
dblname3:= fieldByName ('lname3').asstring; 
dbinstitution3:= fieldByName ('institution3').asstring; 

dborder4:= fieldByName ('order4').asstring; 
dbfname4:= fieldByName ('fname4').asstring; 
dblname4:= fieldByName ('lname4').asstring; 
dbinstitution4:= fieldByName ('institution4').asstring; 

dborder5:= fieldByName ('order5').asstring; 
dbfname5:= fieldByName ('fname5').asstring; 
dblname5:= fieldByName ('lname5').asstring; 
dbinstitution5:= fieldByName ('institution5').asstring; 

dborder6:= fieldByName ('order6’).asstring; 
dbfname6:= fieldByName ('fname6').asstring; 
dblname6:= fieldByName (’lname6').asstring; 
dbinstitution6:= fieldByName ('institution6’).asstring; 
close; 

end; {withTableS} 

{Get Author Name information from the AUTHOR Table) 
with Table9 do begin 



{Move to proper record) 
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open; 

first; 

while fieldbyName('ANumber').asstring <> dbANumber do 
next; 

{ Retrieve Author Name information } 
dbFName := fieldByName('FName').AsString; 
dbLName := fieldByName('LName’).AsString; 
dblnstitution := fieldByName('Institution'),AsString; 

{Determine Order of Authors} 
theAuthors:= TSiringListxreate; 

(Send the Authors} 

send C<B>Author(s): </BxBR>'); 

if dbContactOrder = " then 

send (' <I>‘+ dbFName +' '+ dbLName '+dbInstitution+'</I> ') 
else begin 

(Initialize the stringlist} 

for i:= 0 to 6 do 

theAuthors.add(’not used'); 

dbContactOrderInt:= strtoint(dbContactOrder); 

theAuthors[dbContactOrderInt]:= " +dbFName+ ' ' +dbLName+ '+dbInstitution+" 

if dbOrder2 <> " then begin 
dbOrder2Int:= strtoint(dbOrder2); 

theAuthors[dbOrder2Int]:= "+dbFName2+ ' ' +dbLName2+ '+dbInstitution2+"; 
end; 

if dbOrder3 <> " then begin 
dbOrder3Int:= strtoint(dbOrder3); 

theAuthors[dbOrder3Int]:= "+dbFName3+ ' ' +dbLName3+ '+dbInstitution3+"; 
end; 

if dbOrder4 <> " then begin 
dbOrder4Int:= strtoint(dbOrder4); 

theAulhors(dbOrder4Int];= "+dbFName4+ ' ' +dbLName4+ ’+dbInstitution4+"; 
end: 

if dbOrdcr.S <> " then begin 
dbOrdcr51nl:= strtoint(dbOrder5); 

thcAulhors(dbOrder5Int]:= "+dbFName5+ ' ' +dbLName5+ '+dbInstitution5+"; 
end; 

if dbOrdcrb <> ” then begin 
dbOrder61nt:= strtoint(dbOrder6); 

theAuthors(dbOrder6Int]:= "+dbFName6+ ' ' +dbLName6+ '+dbInstitution6+"; 
end; 

send (’<!>' +theAuthors[l]+ '</IxBR>'); 
for i:= 2 to 6 do 
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if theAuthors[i] <> 'not used' then send ('<!>’ +theAuthors[i]+ '</IxBR>'); 
end; (else) 
close; 

end; (withTable9) 

send C<INPUTTYPE="hidden'* Name="flag" Value='T'>'); 

send (’<H3xB>Title: </B> " ' + dTitle + ' " </H3>'); 

send C<B>Paper Number: </B> " ’ + dPaper_Number + ' " '); 

send (’<PxB>Abstract: </BxP>'); 

for i := 0 to theabstract.count - 1 do 

send( theabstract.strings[i] ); 

theabstract.free; { release the memory held by *theabs tract' ) 

send C<P>You may view the extended summary for this submission by selecting'); 
send ('file '+dPaper_Number+' from the<A HREF="../uploads/"> following list<A 
HREF="../uploads/">c/A>.<P>'); 
sendhr; 

end; {with Query 8} 

with Query 1 do begin 

close; 
sql. clear; 

sql.add ('Select * FROM Reviews WHERE Paper_Number="’+dPaper_Number+""); 
open; 

count:= Recordcount; 

countstr:= inttostr (count); 

dTitle:= fieldbyname('Title*).asstring; 

send C<Pxcenter>There are ' +countstr+ ’ reviews for this paper in the database. <P>'); 

CGIDB 1 .drawtable; ( display all titles } 

send C</center>'); 

send C<BR>'); 

end; (withQueryl) 

sendC '); 

sendhr; 

with Query2 do begin 

close; 

sql.clear; 

sql.add ('Select * FROM Reviews'); 

sql.add ('Where Paper_Number = "’+dPaper_Number+""); 

open; 

count 1:= Recordcount; 
countstrl:= inttostr(countl); 
close; 

end; { vv^ith Query2} 

with Query3 do begin 

close; 

sql.clear; 
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sql.add (’Select * FROM Reviews'); 

sql.add (’Where ((Paper_Number = "'+dPaper_Number+'”)AND(Vole=”Strong Accept”))'); 
open; 

count2:= Recordcount; 
countstr2:= inttostr(count2); 
close; 

end; {withQuery3} 

with Query4 do begin 

close; 
sql. clear; 

sql.add (’Select * FROM Reviews'); 

sql.add (’Where ((Paper_Number = '”-i-dPaper_Number+’”)AND(Vote=''Conditional Accept”))’); 
open; 

counts := Recordcount; 
countstr3:= inttostr(count3); 
close; 

end; { with Query4 } 

with Query5 do begin 

close; 

sql.clear; 

sql.add ('Select * FROM Reviews'); 

sql.add ('Where ((Paper_Number = ”'+dPaper_Number-i-'")AND(Vote=''Reject''))’); 
open; 

count4:= Recordcount; 
countstr4:= inttostr(count4); 
close; 

end; {withQueryS} 

with Query6 do begin 

close; 

sql.clear; 

sql.add ('Select * FROM Reviews’); 

sql.add ('Where ((Paper_Number = '"+dPaper_Number-i-"’)AND(Vote=”Undecided”))'); 
open; 

count5:= Recordcount; 
countstr5:= inttostr(count5); 
close; 

end; {withQuery6} 

with Query? do begin 

close; 

sql.clear; 

sql.add ('Select * FROM Reviews’); 

sql.add (’Where ((Paper_Number = '"+dPaper_Number+’”)AND(Vote='’Not Qualified"))’); 
open; 

count6:= Recordcount; 
countstr6:= inttostr(count6); 
close; 

end ; { with Query? } 
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send ( <CENTER><B><H2>Vote Summary</H2x/B>'); 
send (' '); 

{ Build list of Votes } 
send (STABLE BORDER>'); 

send C<TR><TH># Votes</THxTH>Strong Accept</THxTH>Conditional Accept</TH>'); 

send C<TH>Reject</THxTH>Undecided</THxTH>Not Qualified</THx/TR>’); 

send C<TRxTD>'+countstrl+'</TD>'); 

send ('<TD>'+countstr2-f'c/TD>'); 

send (’<TD>’+countstr3+'</TD>'); 

send C<TD>’+countstr4-f'</TD>’); 

send C<TD>'-fcountstr5+'</TD>'); 

send ('<TD>'+countstr6+'</TDx/TR>'); 

send C</TABLEx/CENTER>’); 

send C<BR>’); 



send C<CENTERxBxI>Please cast your vote for this particular article:</I>'); 
send C<PxFORM METHOD="POST" ACTION=",./cgi-win/MastAcep.exe" >'); 
send (’<INPUT TYPE="hidden” Name=”flag" Value='T’>’); 
send C<INPUT TYPE="hidden" Name='Title” Value="’+ dTitle 
send C<INPUT TYPE="hidden" Name="Paper_Number" Value=”'+ dPaper_Number 
send C<INPUT TYPE="radio” NAME="Vote" VALUE=”Accept" > Accept'); 
send C<INPUT TYPE="radio" NAME="Vote" VALUE=" Reject" > Reject</B>’); 
send (' '); 

send C<PxINPUT TYPE=" submit" Value="Submit Review Info"x/CENTERx/FORM>'); 

{HTML Footer} 
sendhr; 

send C<PxFORM ACTION="../cgi-win/Revsum.exe" METHOD="POST">’); 
send (’<INPUT TYPE="hidden" Name="flag" Value=" 1">'); 
send ('<PxCENTERxINPUT TYPE="submit" Value=" View another 
summary "></CENTERx/FORM>'); 

sendhr; 

send C<PxFORM ACTION="../cgi-win/Mastpwd.exe" METHOD="POST">'); 
send C<INPUTTYPE="hidden" Name="flag" Value=" !">'); 

send C<PxCENTERxINPUT TYPE="submit" Value="Return to the Master Review Options 
Page"x/CENTERx/FORM>'); 
send ('</BODYx/HTML>'); 
closeStdout; 
closeApp( application ); 

end (flag is set) 

else begin (flag **incorrect**} 

send C<centerxHl>Master Review System</Hlx/center>'); 
sendhr; 

send C<centerxH2>Your password was <strong>not accepted !!</strong></H2x/center>'); 
send C<P>Please ensure that you are authorized to access this information.'); 
send C<P>If you made an error, then please <A HREF=".. /review/revie w30.htm">try to login 
again.c/A>'); 

send C<P>If you are not authorized to access this information, please note that a log is'); 
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send (’maintained that includes your URL. You may be subject to civil and/or criminal '); 
send ('prosecution for your actions. <BR>'); 

send (’<P><hr><PxIMG SRC="../review/asil2b0.gif " align=left alt="Asilomar facility">’); 
send (’Return to the <A HREF="../review/masterev.htm">Master Review Log*on Page</A>'); 
send (’</BODYx/HTML>’); 
closeStdout; 
closeApp( application ); 

end; (flag **incorrect**} 

end; (with cgiEnvDatal do} 

end; {FormCreate} 

end. 
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The Master Review Accept/Reject page: MastAcep.exe 



unit Mas_acep; 

{WHEN CALLED: This program updates Accept/Reject data in the Submissi database. 
INPUT: Review data from the RevSrch2 page. 

ACTION: places Review data into the Submissi Table.} 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 

Forms, Dialogs, Cgidb, Cgi, DBTables, DB; 

type 

TForml = class(TForm) 

CGIEnvDatal : TCGIEnvData; 

CGIDB l-.TCGIDB; 

Tablel: TTable; 

DataSourcel: TDataSource; 
procedure FormCreate(Sender: TObject); 

private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Foiml: TForml; 
dflag: string; 
dReviewerlD: string; 
dVote: string; 
dbTitle: string; 
dPaper_Number: string; 



implementation 
($R *.DFM) 



procedure TForml. FormCreate(Sender; TObject); 
begin 

with CGIEnvDatal do begin 

{Standard Header} 

webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 



createStdout; 



155 



sendPrologue; 

{ Determine whether flag is valid } 

dflag:= getsmallfield (’flag’); 

if (dflag = T) then begin {flag is set} 

(Get data from FORM} 

dPaper_Number:= getsmallfield (Taper_Number’); 
dVote:= getsmallfield ('Vote’); 

(Place Data into Submissi Table} 
with Table 1 do begin 

(Move to proper record} 

open; 

first; 

while fieldbyName('Paper_Number’).asstring <> dPaper_Number do 
next; 

if (dVote = 'Accept’) then begin (Accept Article} 

(Update record} 
edit; 

Setfields ([nil, nil, nil, ’Y’]); 

post; 

close; 

end { vote is Accept } 

else begin { vote is Reject} 

(Update record} 
edit; 

Setfields ([nil, nil, nil, ’N']); 

post; 

close; 

end; {if} 

end; (with Tablel } 

(Send the Thank you Paper page with the link to the On-Line Article Review Page} 

send (’<HTMLxHEAD>’); 

SendTitle('Master Review System'); 

send ('c/HEADxBODY bgcolor=FFFFFF>’); 

send (’<centerxHl>Accept/Reject an Article<BRx/Hl>c/center>’); 

sendhr; 

send (’<P>Thank you for your input, <B> Master Reviewer</B>. ’); 

send (’Your information has been added to the Article Submission database. </p>'); 

sendhr; 
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sendC<PxFORM ACTION=”../cgi-win/RevSrch.exe" METHOD='TOST">'); 
send('<INPUT TYPE='*hidden'’ Name="flag" Value="l">'); 
sendC<P><CENTERxINPUT TYPE="submit" Value="View another 
Surnmary''></CENTER></FORM>'); 

sendhr; 

send(’<PxFORM ACTION="../cgi-win/Mastpwd.exe’' METHOD=‘TOST'’>’); 
send('<INPUT TYPE="hidden" Name="flag" Value=''l”>’); 

send(’<PxCENTER><INPUT TYPE="submit" Value="Return to the Master Review Options 
Page”x/CENTERx/FORM>'); 

send C<PxhrxPxIMG SRC="../review/asil2b0.gif ” align=left alt= 'Asilomar facility">'); 
send C</BODYx/HTML>'); 
closeStdout; 
closeApp( application ); 

end {flag IS set} 

else begin (flag **incorrect**} 

send C<centerxH2>Master Review System</H2>c/center>’); 
sendhr; 

send C<centerxH2>Your password was <strong>not accepted! !</strongx/H2x/center>’); 
send C<P>Please ensure that you are authorized to access this information.’); 
send (’<P>If you made an error, then please <A HREF=”../review/masterev.htm">try to login 
again.</A>’); 

send (’<P>If you are not authorized to access this information, please note that a log is'); 
send (’maintained that includes your URL. You may be subject to civil and/or criminal ’); 
send (’prosecution for your actions. <BR>'); 

send C<PxhrxPxIMG SRC=”../review/asil2b0.gif ” align=left alt=" Asilomar facility">'); 
send (’Return to the <A HREF="../review/masterev.htm”>Master Review Log-on Page</A>'); 
send (’<BR>’); 

send C</BODYx/HTML>’); 

closeStdout; 

closeApp( application ); 

end; (flag **incorrect**} 

end; (with cgiEnvDatal do} 

end; {FormCreate} 

end. 



157 



The Master Review Accept/Reject page: Acceprej.exe 



unit Acc_rej; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB liTCGIDB; 

DataSourcel: TDataSource; 

Query 1: TQuery; 

Articles: TTable; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Form 1 : TForm 1 ; 

dbtitle, dbPaper_Number: string; 

dflag: string; (valid program call) 

implementation 

($R *.DFM) 

procedure TForm l.FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 
creates tdout; 
sendPrologue; 

send C<HTML><HEAD>'); 

SendTitle(’Master Review System'); 

send ('</HEADxBODY bgcolor=FFFFFF>'); 

{ Determine whether flag is valid) 

dflag:= getsmallfield ('flag'); 

if (dflag = T) then begin (flag is set) 

send(’<center><H2>Master Review System</H2x/center>’); 
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sendhr; 



(Build Form} 

send('<PxFORM ACTION='‘../cgi-win/Aceprej 2.exe" METHOD=”GET">’); 

(Build Pull-Down menu for choices) 

send(There are four methods of accepting or rejecting Articles:<BRxul>’); 
send(’<LI> Accept the selected articles only, do not modify any other Articles'); 
send('<LI>Accept the selected articles AND Reject all others’); 
send('<LI>ReJect the selected articles only, do not modify any other Articles’); 
send(’<LI>Reject the selected articles AND Accept all others </□!>’); 

send(’<PxcenterxSELECT NAME="Action">’); 
send(’<OPTION> ACCEPT); 
send(’<OPTION> ACCEPT_then_Reject'); 
send(’<OPTION> REJECT); 
send(’<OPTION> REJECT_then_Accept’); 
send(’</SELECTx/centerxP>’); 

( Build the check boxes of Titles } 

with Articles do begin 
open; 
first; 

While not Articles.EOF do begin 

dbtitle:= fieldbyname(’Title’).asstring; 
dbPaper_Number:= fieldbyname(’Paper_Number’).asstring; 

send C<INPUT TYPE="checkbox” NAME="T" Value="' +dbPaper_Number+ "’> # ' 
+dbPaper_Number+ ' ’); 

send (" +dbtitle+ ’ <BR>’); 
next; 

end; (while not EOF} 

close; 

end; (with articles do} 

send('<PxCENTERxINPUT TYPE="submit" Value=" Accept / Reject these articles "xP> ’); 
send(’<INPUT TYPE="reset" VALUE="Reset values "x/CENTERx/FORM>’); 

sendhr; 

send(’<PxFORM ACTION="../cgi“Win/Mastpwd.exe" METHOD='’POST">’); 
send('<INPUT TYPE="hidden" Name="flag" Value="l”>’); 

send('<PxCENTERxINPUT TYPE="submit" Value="Retum to the Master Review System Options 
page"x/CENTERx/FORM>’); 
end (flag is set} 

else begin (flag **incorrect**} 

send C<centerxH2>Maslcr Review System</H2x/center>’); 
sendhr; 

send (’<centerxH2>Your password was <strong>not accepted !!</strongx/H2x/center>’); 
send (’<P>Please ensure that you are authorized to access this information.’); 

send C<P>If you made an error, then please <A HREF="../review/masterev.htm">try to login again.</A>’); 
send (’<P>If you are not authorized to access this information, please note that a log is’); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal ’); 
send (’prosecution for your actions.<BR>'); 

send C<PxhrxPxIMG SRC=".. /re view/asil 2b0.gif " align=left alt="Asilomar facility">’); 
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send ('Return to the <A HREF="http://XXX.XXX.XXX.XXX/review/masterev.html 

send ('Review System Log-on Page</A>'); 

send C</BODY></HTML>’); 

closeStdout; 

closeApp( application ); 

end; {flag **incorrect**} 

send C</BODY><mTML>'); 

closeStdout; 

closeApp( application ); 

end; { with CGIEnvDatal} 
end; {FormCreate} 
end. 



'>Master'); 
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The Master Review Accept/Reject confirmation page: Aceprej2.exe 



unit Acc_rej2; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DB, DBTables, Cgidb, Cgi; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB TTCGIDB; 

DataSource 1 : TDataSource; 

Articles: TTable; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Forml: TForml; 

i, j, dTitle, MySelector, dbPaper_Number: integer; 

dAction : string; 

dTitlein: string; 

dString, AssignString: string; 

Titlelist : TStringList; 

function TitleToInt ( S: string) :integer; 



implementation 
{$R *.DFM} 

function TitleToInt ( S: string) : integer; 

{This function is necessary because the string value of dTitle has several spaces in 
it and the strtoint function cannot handle the conversion properly} 

var 

temp: string, (temporary variable to build new string into) 

j: integer; { Counting Variable to keep track of how many characters are in the number } 
begin 

(set the counter to zero) 

j:= 0; 



(count the characters) 
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repeal 
j:=j+l; 
until S(j+1] = ' 



{ Copy the valid number characters over to temp } 

temp := Copy(S, 1, j); 

{ Convert the temp string to an integer value } 

TitleToInt := strtoint (temp); 

end; {NoSpaces} 

procedure TForml .formcreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINIFilename:=paramstr( 1 ); 
application. onException:=cgiErrorHandler; 
application. processMessages; 
createStdout; 
sendPrologue; 

send (’<HTMLxHEAD>’); 

SendTitle(’Master Review System’); 
send (’</HEADxBODY bgcolor=FFFFFF>’); 
send(’<centerxH2>Master Review System</H2x/center>’); 
sendhr; 



{ Get query string from Assign.exe } 

Titlelist:= TStringlist. create; {list of titles to assign to the session} 
AssignString:= CGIQueryString'^; 

j:= 0; (The counter for the individual strings within the QueryString} 



for i := 7 to Length(AssignString) do (The counter for going through the AssignString - eight is the 

first valuable character (the beginning of the Session 



Neumonic) } 



if AssignSlringlil <> then begin (the character is valuable} 
dStringLil := AssignString[i]; 
j:=j+l, 

end (if AssignStringfi] <> *&' then} 
else begin {The & signifies the end of the string} 

TitleList.add (dString); 

dString:= ’ ’; { Blank out the old values } 

j:=0; ( reset the string counter} 

i:= i+ 1 ; ( Skip over the text ”T=” } 

end; {else} 
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TitleList.add (dString); {This is to put the last string into the string list. It is 
necessary because there is no & at the end. } 

{ Place the Session Neumonic into each Paper_Number passed} 

(The first item in the Title List is the Session Neumonic} 

dAction:= TitleList[0]; 

if (dAction[l]=’A’) and (dAction[7] <> then MySelector := 1; 
if (dAction[l]=‘A') and (dAction[7] = then MySelector := 2; 
if (dAction[l]=’R‘) and (dAction[7j <> then MySelector := 3; 
if (dAction[l]='R') and (dAction[7j = then MySelector := 4; 



case MySelector of 
1 : begin (Accept only} 

(Send confirmation} 

sendhdr (3’, ’<CENTERxP>The following Articles were ACCEPTED:<br>'); 

(accept the articles with the selected Paper_Numbers} 
with Articles do begin 

open; { Prepare the Table for use } 

for i:= 1 to TitleList.count-1 do begin (The rest of the items are Paper_Numbers} 

(Get the next title number} 

dTitlein:= TitleList[i]; 

(Convert the Title string to an integer value} 
dTitle:= TitleToInt (dTitlein); 

(Move to proper record} 

first; (go back to the first record before every new search} 
while fieldbyname(’Paper_Number').asinteger <> dTitle do 
next; 

(Insert the Session} 
edit; 

Setfields ([nil, nil, nil, T’]); (The remaining fields are ignored} 
post; 

{ Send title name } 

sendC# ’ +fieldbyname(’Paper_Number').asstring+ ’ ’ +fieldbyname(Title').asstring+ ’<BR>*); 
end; {for} 
close; ( the table} 



end; (with Articles} 
send('</center>'); 
end; (Accept only} 
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2 : begin {Accept and Reject) 



( Send confirmation } 

sendhdr ('3', '<CENTERxP>The following Articles were ACCEPTED:<br>’); 

{accept the articles with the selected Paper_Numbers } 

with Articles do begin 

open; { Prepare the Table for use } 

{Set all *Not Invited* Articles to "rejected") 
while not EOF do begin 

if fieldbyname('Invited’).asstring <> 'Y' then begin 
edit; 

Setfields ([nil, nil, nil, 'N']); {The remaining fields are ignored) 
post; 

end; {If not invited) 

next; 

end; {While} 

for i:= 1 to TitleList. count- 1 do begin {The rest of the items are Paper_Numbers) 

{Get the next title number) 
dTitlein:= TitleList[i]; 

{ Convert the Title string to an integer value) 
dTitle:= TitleToInt (dTitlein); 

{Move to proper record) 

first; {go back to the first record before every new search) 
while fieldbyname('Paper__Number').asinteger <> dTitle do 
next; 

{ Insert the Session } 

edit; 

Setfields ([nil, nil, nil, 'Y']); {The remaining flelds are ignored) 
post; 

{Send title name) 

sendC# ' +fieldbyname('Paper_Number').asstring+ ‘ ' +fieldbyname(Title’).asstring+ ’<BR>‘); 
end; {for} 
close; { the table) 
end; {with Articles) 

sendhdr('3‘, '<P>A11 OTHER Articles were Rejected !</center><BRxP>’); 
end; {Accept and Reject) 
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3 : begin {Reject only} 



(Send confirmation) 

sendhdr ('3', ’<CENTERxP>The following Articles were REJECTED :<br>'); 

(The rest of the items are Paper_Numbers ) 
with Articles do begin 

open; (Prepare the Table for use) 
for i:= 1 to TitleList.count-1 do begin 

(Get the next title number) 

dTitlein:= TitleList[i]; 

{ Convert the Title string to an integer value) 
dTitle:= TitleToInt (dTitlein); 

(Move to proper record) 

first; { go back to the first record before every new search } 
while fieldbyname('Paper_Number').asinteger <> dTitle do 
next; 

{ Insert the Session } 
edit; 

Setfields ([nil, nil, nil, 'N']); (The remaining fields are ignored) 
post; 

(Send title name) 

sendC# ’ +fieldbyname(Taper_Number').asstring+ ' ' +fieldbyname(Title’).asstring+ ’<BR>'); 

end; (for) 

close; { the table) 
send(’</center>’); 

end; { with Articles) 

end; (Reject only) 

4: begin { 'Reject and accept' } 

(Send confirmation} 

sendhdr ('3’, '<CENTERxP>The following Articles were REJECTED :<br>’); 

(accept the articles with the selected Paper_Numbers) 
with Articles do begin 

open ; { Prepare the Table for use } 

(Set all *Not Invited* Articles to "accepted") 
while not EOF do begin 

if fieldbyname ('lnvited’).asstring <> 'Y' then begin 
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edit; 

Setfields ([nil, nil, nil, ’Y’]); {The remaining fields are ignored} 
post; 

end; (If not invited} 

next; 

end; (While} 



for i:= 1 to TitleList.count-l do begin (The rest of the items are Paper_Numbers} 

(Get the next title number} 

dTitlein:= TitleList[i]; 

(Convert the Title string to an integer value} 
dTitIe:= TitleToInt (dTitlein); 

(Move to proper record} 

first; (go back to the first record before every new search} 
while fieldbyname('Paper_Number’).asinteger <> dTitle do 
next; 

(Insert the Session} 
edit; 

Setfields ([nil, nil, nil, 'N’]); (The remaining fields are ignored} 
post; 

(Send title name} 

send(’# ’ +fieldbyname('Paper_Number').asstring+ ' ’ +fieldbyname(Title’).asstring+ ’<BR>'); 
end; {for} 
close; ( the table} 
end; (with Articles} 

sendhdr(3’, ’<P>A11 OTHER Articles were Accepted !</center><BRxP>’); 

end; (Reject and accept} 
else begin (selector not working} 

send(’Selector did not work<BR>'); 
sendC Action was ‘ +dAction+ 
end; {else} 

end; {case} 

(Send Footer} 

(Button to Accept/Reject more Articles} 

send(‘<PxFORM ACTION="../cgi-win/Acceprej.exe" METHOD="POST">'); 
send(’<CENTERxINPUT TYPE=”hidden" Name=”flag” Value=” 1 
send('<PxINPUT TYPE="submit" Value=" Accept/Reject more Artie les"></FORMxP> 



166 



(Button to move to Assign Articles to Sessions} 

send('<P><FORM ACTION="../cgi-win/Assign.exe" METHOD="POST”>'); 
send('<INPUT NAME=”flag" TYPE="hidden" Valuer" r*>'); 
send('<P><INPUT TYPE="submit" Value="Now Assign the Articles to Sessions " 
Size="30"></centerx/FORM>'); 

sendhr; 

send('<P><FORM ACTION="../cgi-win/Mastpwd.exe” METHOD="POST">'); 
send(’<INPUT TYPE="hidden" Name='‘flag” Value=’T’>'); 

send('<P><CENTER><INPUT TYPE=" submit" Value="Return to the Master Review System Options 
page"></CENTERx/FORM>'); 
send C</BODYx/HTML>'); 
closeStdout; 
closeApp( application ); 

end; (with cgiEnvDatal do} 

end; (FormCreate} 

end. 
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The Master Review overall submission status page: Overstat.exe 



unit Ovr_stat; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB liTCGIDB; 

DataSourcel: TDataSource; 

Query 1: TQuery ; 

Table 1: TTable; 

Table 1 Paper_Number: TIntegerField; 

TablelTitle: TStringField; 

Table 1 Invited: TStringField; 

Table I Accepted: TStringField; 

TablelContactAuthorNumber: TIntegerField; 

Table 1 Session: TStringField; 

TablelOrderInSession: TStringField; 

Table I PresentationTime: TStringField; 

Table 1 Keyword 1 : TStringField; 

TableIKeyword2: TStringField; 

Table I Keywords: TStringField; 

Table 1 Abstract: TMemoField; 

Table IContactOrder: TStringField; 

Table lFName2: TStringField; 

TablelLName2: TStringField; 

Table llnitial2: TStringField; 

Table 1 Institution2: TStringField; 

Table 10rder2: TStringField; 

Table IFNameS: TStringField; 

Table ILNameS: TStringField; 

Table llnitiaB: TStringField; 

Table llnstitutionS: TStringField; 

TablelOrderS: TStringField; 

Table lFName4: TStringField; 

TablelLName4: TStringField; 

Tablellnitial4: TStringField; 

Table lInstitution4: TStringField; 

Table 10rder4: TStringField; 

Table IFNameS: TStringField; 

TablelLNameS: TStringField; 

Table llnitiaB: TStringField; 

Table 1 Institutions : TStringField; 

Table 1 Orders : TStringField; 

Table lFName6: TStringField; 

Table lLName6: TStringField; 

Tablellnitialb: TStringField; 

Tablellnstitutionb: TStringField; 

Table lOrderb: TStringField; 
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DataSource2: TDataSource; 

Query2: TQuery; 

Table2; TTable; 

CGIDB2: TCGIDB; 

DataSource3: TDataSource; 

Query3: TQuery; 

Table3: TTable; 

CGIDB3: TCGIDB; 

CGIDB4: TCGIDB; 

DataSource4: TDataSource; 

Query4: TQuery; 

Table4: TTable; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Form 1 : TForm 1 ; 
dflag: string; 
dReviewerlD: string; 
dbOption: string; 

i, count, count2, count3, count4 linteger; 
countstr, countstr2, countstr3, countstr4: string; 

implementation 

{$R *.DFM} 

procedure TForm l.FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

webSiteINIFilename:=paramstr( 1 ); 
application.onException:=cgiErrorHandler; 
application. processMessages; 

createStdout; 

sendPrologue; 

send C<HTMLxHEAD>‘); 

SendTitle('Master Review System'); 

send C</HEAD><BODY bgcol or=FFFFFF>') ; 

{ Determine whether flag is valid ) 
dflag:= getsmallfield ('flag'); 

if (dflag = T) then begin { flag is set ) 

send('<center><Hl>Overall Submission Status</Hl>c/center>'); 
sendhr; 
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send(’<center>Here are the current figures on the overall submission and review process:<BR>'); 

with Query 1 do begin 

close; 
sql. clear; 

sql.add ('Select * FROM Submissi'); 
open; 

count:= Recordcount; 
countstr:= inttostr (count); 
end; {with Query 1} 

with Query2 do begin 

close; 
sql. clear; 

sql.add ('Select DISTINCT (Title) FROM Reviews'); 
open; 

count2:= Recordcount; 
countstr2:= inttostr (count2); 
end; (withQuery2} 

with Query3 do begin 

close; 
sql. clear; 

sql.add ('Select Title FROM Submissi WHERE Accepted="Y"’); 
open; 

count3:= Recordcount; 
countstr3:= inttostr (count3); 
end; |withQuery3} 

with Query4 do begin 

close; 

sql.clear; 

sql.add (’Select Title FROM Submissi WHERE Invited="Y"’); 
open; 

count4:= Recordcount; 
countstr4:= inttostr (count4); 
end; |withQuery4} 

send('<BR> '); 

{ Build list of Votes } 

send('<CENTERxTABLE BORDER>'); 

send(’<TRxTH># Submissions</THxTH># Reviewed</THxTH># Accepted</TH>'); 

send('<TH># Invited</THx/TR>’); 

send(’<TRxTD>'+countstr+'</TD>'); 

send(’<TD>'+countstr2+'</TD>'); 

send(’<TD>'+countstr3+'</TD>’); 

send('<TD>'+countstr4+’</TDx/TR>’); 

send('</TABLEx/CENTER>'); 

send('<BR>’); 
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sendhr; 

send('<P><FORM ACTION="../cgi-win/Mastpwd.exe" METHOD="POST’'>'); 
sendC<INPUTTYPE=" hidden” Name=”flag” Value=” !”>'); 

send('<P><CENTER><INPUTTYPE=”submit” Value=”Return to the Master Review Options 
Page”x/CENTER></FORM>’); 

send C</BODYx/HTML>’); 

closeStdout; 

closeApp( application ); 

end {flag is set} 

else begin (flag **incorrect** } 

send C<centerxH2>Master Review System</H2x/center>'); 
sendhr; 

send C<centerxH2>Your password was <strong>not accepted! !</strongx/H2x/center>'); 
send C<P>Please ensure that you are authorized to access this information.'); 

send C<P>If you made an error, then please <A HREF=”../review/Masterev.htm”>try to login again.</A>'); 
send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
send ('prosecution for your actions. <BR>'); 

send C<PxhrxPxIMG SRC="../review/asil2b0.gif " align=left alt=”Asilomar facility”>'); 

send ('Return to the <A HREF=''http://XXX.XXX.XXX.XXX/review/Masterev.htmr>Asilomar'); 

send (’Conference On-line Submission Pagec/A>'); 

send (’</BODYx/HTML>’); 

closeStdout; 

closeApp( application ); 

end; (flag **incorrect**} 

end; (with cgiEnvDatal do} 

end; {FormCreate} 

end. {Application} 



171 



172 




APPENDIX E. MISCELLANEOUS CODE 



This appendix contains the HTML and Delphi code for several HTML documents 
and Delphi executables that were added to the System Administration Sub-system. These 
programs simply provide improved functionality in maintaining the system. 
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The System Admin overall submission status page: Overstat2.exe 



unit Ovr_sta2; 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 
Forms, Dialogs, DBTables, DB, Cgidb, Cgi; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB PTCGIDB; 

DataSourcel: TDataSource; 

Query 1: TQuery; 

Table 1: TTable; 

DataSource2: TDataSource; 

Query 2: TQuery; 

Table2: TTable; 

CGIDB2: TCGIDB; 

DataSource3: TDataSource; 

QueryS: TQuery; 

Table3: TTable; 

CGIDB3; TCGIDB; 

CGIDB4: TCGIDB; 

DataSource4: TDataSource; 

Query4: TQuery; 

Table4: TTable; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Forml: TForml; 
dflag: string; 
dReviewerlD: string; 
dbOption: string; 

i, count, count2, count3, count4 :integer; 
countstr, countstr2, countstr3, countstr4: string; 

implementation 

{$R *.DFM} 

procedure TForm 1 .FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 
webSiteINIFilename:=paramstr( 1 ); 
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application. onException:=cgiErrorHandler; 
application. processMessages; 



createStdout; 

sendPrologue; 

send C<HTMLxHEAD>'); 

SendTitle('System Administration'); 

send (’</HEADxBODY bgcolor=FFFFFF>’); 

(Determine whether flag is valid } 

dflag:= getsmallfield ('flag'); 

if (dflag = T) then begin (flag is set} 

send('<centerxHl>Overall Submission Statusc/Hlx/center>'); 
sendhr; 

send('<center>Here are the current figures on the overall submission and review process:<BR>') 

with Query 1 do begin 

close; 

sql.clear; 

sql.add ('Select * FROM Submissi'); 
open; 

count:= Recordcount; 
countstr:= inttostr (count); 
end; (with Query 1) 

with Query2 do begin 

close; 

sql.clear; 

sql.add ('Select DISTINCT (Title) FROM Reviews'); 
open; 

count2:= Recordcount; 
countstr2:= inttostr (count2); 
end; (withQueryZ) 

with Query3 do begin 

close; 

sql.clear; 

sql.add (’Select Title FROM Submissi WHERE Accepted="Y’"); 
open; 

count3:= Recordcount; 
countstr3:= inttostr (count3); 
end; (with Query 3} 

with Query 4 do begin 

close; 

sql.clear; 

sql.add ('Select Title FROM Submissi WHERE Invited="Y"'); 
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open; 

count4:= Recordcount; 
countstr4:= inttostr (count4); 
end; {withQuery4} 

send(’<BR> '); 



{ Build list of Votes } 

send C<CENTERxTABLE BORDER>’); 

send C<TR><TH># Submissions</THxTH># Reviewed</THxTH># Accepted</TH>’); 

send C<TH># Invited</THx/TR>'); 

send C<TR><TD>'+countstr4-'</TD>'); 

send (’<TD>’+countstr2+'</TD>'); 

send ('<TD>’+countstr3+'</TD>'); 

send('<TD>'+countstr4+'</TDx/TR>'); 

send C</TABLEx/CENTER>'); 

send C<BR>'); 



sendhr; 

send C<PxFORM ACTION="../cgi-win/Adminpwd.exe" METHOD="POST">'); 
send C<INPUTTYPE=’*hidden” Name="flag'* Value=”l">'); 

send C<PxCENTERxINPUT TYPE="submit" Value=”Return to the System Admin Options 
Page"x/CENTERx/FORM>’); 

send C</BODYx/HTML>'); 

closeStdout; 

closeApp( application ); 

end {flag is set) 

else begin (flag **incorrect**} 

send C<centerxH2>System Administration</H2x/center>'); 
sendhr; 

send (’<centerxH2>Your password was <strong>not accepted! !</strong></H2x/center>'); 
send C<P>Please ensure that you are authorized to access this information.'); 

send C<P>If you made an error, then please <A HREF="../admin/admin20.htm">try to login again.c/A>'); 
send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
send ('prosecution for your actions.<BR>'); 

send C<PxhrxPxIMG SRC="../admin/asil2b0.gif " align=left alt="Asilomar facility">’); 
send C</BODYx/HTML>'); 
closeStdout; 
closeApp( application ); 

end; (flag **incorrect**} 

end; (with cgiEnvDatal do) 

end; {FormCreate} 

end. (Application) 
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The database purge page: Timeout.exe 



unit Time_out; 

(WHEN CALLED: This program verifies that user wants to purge old data from the Asilomar 
database. } 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 

Forms, Dialogs, Cgidb, Cgi, DBTables, DB; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB LTCGIDB; 

DataSourcel: TDataSource; 
procedure FormCreate(Sender: TObject); 

private 

{ Private declarations } 
public 

{ Public declarations } 
end; 

var 

Forml: TForml; 
dflag: string; 
dAdminID: string; 
dUserlD: string; 

Subcount, Revcount: integer; 

implementation 

{$R*.DFM} 

procedure TForml. FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

{Standard Header} 
webSiteINIFilename:=paramstr(l); 
application.onException:=cgiErrorHandler; 
application. processMessages; 

createStdout; 

sendPrologue; 

{ Determine whether flag is valid } 

dflag:= getsmallfield ('flag'); 

if (dflag = T') then begin (flag is set} 

(Send the confirmation page to System Administrator that records were deleted} 
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send C<HTML><HEAD>'); 

SendTitle('System Administration'); 

send ('</HEADxBODY bgcolor=FFFFFF>'); 

send C<center><Hl>Database Purge</Hlx/center>'); 

sendhr; 

send C<CENTER>Are you absolutely certain that you want to purge old records from the 
database?<P>'); 

send ('Both old submissions and reviews will be purged. Press the button below to execute the 
purge.</CENTERxP>'); 

sendhr; 

send C<PxFORM ACTION="../cgi-win/Timeout2.exe" METHOD="POST">'); 
send C<INPUT TYPE="hidden" Name="flag" Value=" !">'); 
send C<INPUT TYPE="hidden" Name="UserID" Value="’+dUserID+'">'); 
send C<PxCENTERxINPUT TYPE="submit" Value="Purge Old Records 
Now!"x/CENTERx/FORM>’); 

sendhr; 

send C<PxFORM ACTION="../cgi-win/Adminpwd.exe" METHOD="POST">'); 
send C<INPUT TYPE="hidden" Name="flag" Value="l">'); 

send C<PxCENTERxINPUT TYPE="submit" Value="Return to the System Admin Main 
Menu"x/CENTERx/FORM>'); 

send C<PxhrxPxIMG SRC="../admin/asil2b0.gif " align=left alt="Asilomar facility">'); 
send ('</BODY><yHTML>'); 
closeStdout; 
closeApp( application ); 

end {flag is set) 

else begin (flag **incorrect**) 

send C<centerxH2>System Administration</H2x/center>'); 
sendhr; 

send (’<centerxH2>Your password was <strong>not accepted! !</strongx/H2x/center>’); 
send C<P>Please ensure that you are authorized to access this information.'); 

send C<P>If you made an error, then please <A HREF="../admin/admin20.htm">try to login again. </A>'); 
send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal '); 
send ('prosecution for your actions. <BR>'); 

send C<PxhrxPxIMG SRC="../admin/asil2b0.gif " align=left alt="Asilomar facility ">'); 
send (’Return to the <A HREF="../admin/admin20.htm">System Administration Log-on Page</A>'); 
send C<BR>'); 

send C<y^ODYx/HTML>'); 

closeStdout; 

closeApp( application ); 

end; {flag **incorrect**) 
end; {with cgiEnvDatal do) 
end; {FormCreate} 
end. 
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The database purge confirmation page: Timeout2.exe 



unit Time_ou2; 

{WHEN CALLED: This program purges old data from the Asilomar database.} 

interface 

uses 

SysUtils, WinTypes, WinProcs, Messages, Classes, Graphics, Controls, 

Forms, Dialogs, Cgidb, Cgi, DBTables, DB; 

type 

TForml = class(TForm) 

CGIEnvDatal: TCGIEnvData; 

CGIDB LTCGIDB; 

Table 1: TTable; 

DataSourcel: TDataSource; 

Table2: TTable; 

procedure FormCreate(Sender: TObject); 
private 

{ Private declarations ) 
public 

{ Public declarations } 
end; 

var 

Forml: TForml; 
dflag: string; 
dAdminID: string; 

Subcount, Revcount: integer; 

implementation 
($R *.DFM} 

procedure TForml .FormCreate(Sender: TObject); 
begin 

with CGIEnvDatal do begin 

(Standard Header) 
webSiteINIFilename:=paramstr( 1 ); 
application.onException:=cgiErrorHandler; 
application.processMessages; 

createStdout; 

sendPrologue; 

(Determine whether flag is valid } 

dflag:= getsmallfield ('flag'); 

if (dflag = T) then begin (flag is set) 

(Get System Admin ID from FORM) 
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dAdminID:= getsmallfield ('UserlD'); 



{Check Submissi Table for old data} 
with Tablel do begin 
Subcount:=0; 
open; 
first; 

while not Tablel. EOF do begin 

if StrToDateTime(FieldByName(’Year').AsString)<(Now - 20) then begin {older than 43 days) 
Delete; {record} 

Subcount:=Subcount + 1 ; 
end 
else 
next; 

end; {while not EOF} 

close; 

end; {with Tablel} 



{Check Reviews Table for old data} 
with Table2 do begin 
Revcount:=0; 
open; 
first; 

while not Table2.EOF do begin 

if StrToDateTime(FieldByName('Year').AsString)<(Now - 15) then begin {older than 43 days} 
Delete; {record} 

Revcounl:=Revcount + 1; 
end 
else 
next; 

end; {while not EOF} 

close; 

end; {with Table2} 

{Send the confirmation page to System Administrator that records were deleted} 

send C<HTML><HEAD>'); 

SendTitleCSysiem Administration'); 

send C</HEADxBODY bgcolor=FFFFFF>'); 

send ('<cenlerxH l>Dalabase Purge</Hlx/center>’); 

sendhr; 

if Revcount=0 then begin 

send C<CENTER>Thc are no old records in the database!<P>’); 

send ('No records ucrc deleted. </CENTERxP>'); 

end 

else begin 

send C<CENTER>Thc Records have been successfully purged from the database.<P>’); 
send ('Reviews. DB records deleted: '+IntToStr(Revcount)+'.</CENTERxP>’); 
end; 

sendhr; 

send('<PxFORM ACTION="../cgi-win/Adminpwd.exe" METHOD="POST">'); 
send('<INPUTTYPE="hidden" Name="flag" Value="l">'); 
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sendC<P><CENTER><INPUT TYPE="submit" Value="Relurn to the System Admin Options 
Page‘'x/CENTER></FORM>'); 

send (’<P><hr><PxIMG SRC="../admin/asil2b0.gif " align=left alt=”Asilomar facility">'); 

send C</BODYx/HTML>‘); 

closes tdout; 

close App( application ); 

end (flag is set) 

else begin (flag **incorrect**} 

send C<centerxH2>System Administration</H2x/center>’); 
sendhr; 

send (’<centerxH2>Your password was <strong>not accepted! !</strongx/H2x/center>’); 
send (’<P>Please ensure that you are authorized to access this information.'); 

send (’<P>If you made an error, then please <A HREF=’'../admin/admin20.htm">try to login again.</A>’); 
send C<P>If you are not authorized to access this information, please note that a log is'); 
send ('maintained that includes your URL. You may be subject to civil and/or criminal ’); 
send ('prosecution for your actions. <BR>'); 

send C<PxhrxPxIMG SRC="../admin/asil2b0.gif " align=left alt="Asilomar facility">’); 
send ('Return to the <A HREF="../admin/admin20.htm">System Administration Log-on Page</A>'); 
send C<BR>'); 

send (•</BODYx/HTML>’); 

closeStdout; 

closeApp( application ); 

end; (flag **incorrect** } 

end; (with cgiEnvDatal do} 

end; {FormCreate} 

end. 
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